Senior Privacy & Data Protection Officer

AIA Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

AIA Malaysia is seeking a Data Protection Officer to lead the company’s privacy program and ensure compliance with Act 709 and global standards. You’ll liaise with regulators and act as the main contact for data subjects, guiding privacy risk management across business units.

Responsibilities include DPIAs, data breach management, vendor due diligence, and embedding privacy into processes. Candidates should have 7–10 years in compliance/security and relevant certifications.

Qualifications

• Bachelor’s degree in law, business administration, information security, or related field.
• Certifications: CIPP/A, CIPM, CDPO, ISACA/IAPP or similar.

Responsibilities

• Data privacy & compliance oversight across the company.
• Draft, review and maintain local data protection policies and guidelines.
• Implement a risk-based privacy program and embed privacy-by-design.
• Coordinate cross-functional teams to embed privacy requirements.
• Maintain a centralized record of processing activities and privacy risk register.
• Review DPIAs and conduct periodic monitoring, audits, and policy reviews.
• Coordinate with IT, Legal, HR, Operations for privacy controls.

Skills

Data privacy

GDPR

Privacy by design

Data subject rights

Third-party governance

Stakeholder management

Privacy culture

Cybersecurity basics

Education

Bachelor’s degree in law / business / information security

CIPP/A

CIPM

CDPO

ISACA / IAPP accreditation

Tools

Certification programs

Job description

AIA Malaysia is seeking a Data Protection Officer to lead the company’s privacy program and ensure compliance with Act 709 and global standards. You’ll liaise with regulators and act as the main contact for data subjects, guiding privacy risk management across business units.

Responsibilities include DPIAs, data breach management, vendor due diligence, and embedding privacy into processes. Candidates should have 7–10 years in compliance/security and relevant certifications.