Senior Data Privacy & PDPA Compliance Lead

Singtel; Kampung Malaysia Tambahan; On-site; Confidential; Full time

Job summary

Singtel’s Sudong Data Protection Officer (DPO) role is based in Kuala Lumpur, reporting to the GBS KL Site Lead. The DPO oversees PDPA compliance, privacy governance, DPIAs, and incident management for Sudong’s data processing activities.

The role collaborates with the Singtel Group DPO and Group Privacy Offices to safeguard personal data. The DPO will lead privacy policy development, staff training, and regulatory engagement, while ensuring independent oversight and timely response to data

Qualifications

• Bachelor’s degree and/ or professional privacy related certifications preferred.
• Strong knowledge of Malaysia PDPA and privacy requirements.
• Experience with DPIAs, data breaches, privacy reviews, and third-party privacy risks.
• Understanding of privacy governance, data lifecycle, and privacy-by-design principles.
• Experience in shared services, GBS, multinational, or regulated environments is an advantage.

Responsibilities

• Provide independent privacy oversight and governance for Sudong’s handling of personal data.
• Monitor compliance with PDPA and privacy requirements; escalate risks to Sudong management.
• Develop and roll out privacy policies, procedures, and guidance across GBS.
• Advise business functions on privacy requirements and risk mitigation measures.
• Manage DPIA processes and support DPIAs across Sudong when required.
• Coordinate data breach management, incident investigations, and notifications as needed.
• Oversee data subject rights requests and ensure timely responses.
• Assess vendor privacy risks and ensure contractual safeguards.

Skills

Privacy governance

Data protection

DPIA

Privacy by design

Risk management

Stakeholder management

Bilingual: Bahasa Malaysia & English

Education

Bachelor's degree in Law, Information Technology, Information Security, Risk Management, Compliance, Business Administration, or related discipline

Job description

Singtel’s Sudong Data Protection Officer (DPO) role is based in Kuala Lumpur, reporting to the GBS KL Site Lead. The DPO oversees PDPA compliance, privacy governance, DPIAs, and incident management for Sudong’s data processing activities.

The role collaborates with the Singtel Group DPO and Group Privacy Offices to safeguard personal data. The DPO will lead privacy policy development, staff training, and regulatory engagement, while ensuring independent oversight and timely response to data