APAC Director, Data Privacy & Governance

Sumitomo Mitsui Banking Corporation; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Sumitomo Mitsui Banking Corporation (SMBC) is seeking a Senior Lead for regional data privacy governance in the APAC region, based in Singapore. You will oversee DPO coordination, ensure PDPA compliance, and drive privacy initiatives across multiple jurisdictions.

You will engage regulators, senior executives, and stakeholders while advancing training and awareness to embed data protection throughout the organization.

Qualifications

• Bachelor's degree required; advanced degree preferred.
• 12+ years in data privacy, data governance, compliance or risk management with regional leadership experience.
• Strong knowledge of Singapore PDPA and APAC privacy regulations.
• Experience in banking or highly regulated industries.
• Certifications such as CIPP/A, CIPM, CIPT, CDMP, CISSP, CISA or CRISC advantageous.

Responsibilities

• Lead and oversee SMBC's regional data privacy governance framework across APAC.
• Coordinate country DPOs to ensure consistent privacy controls.
• Provide guidance on Singapore PDPA and APAC privacy regulations.
• Monitor regulatory developments and drive compliance programs across jurisdictions.
• Oversee PIAs, privacy risk assessments, and remediation initiatives.
• Establish governance for cross-border data transfers and third-party processing.
• Lead privacy incident and breach management governance, including regulatory reporting.
• Deliver privacy reporting and insights to senior management and governance committees.
• Drive privacy awareness, training, and a culture of data protection.
• Collaborate with Legal, Compliance, Risk, Technology, Information Security, and business stakeholders on privacy initiatives.

Job description

Sumitomo Mitsui Banking Corporation (SMBC) is seeking a Senior Lead for regional data privacy governance in the APAC region, based in Singapore. You will oversee DPO coordination, ensure PDPA compliance, and drive privacy initiatives across multiple jurisdictions.

You will engage regulators, senior executives, and stakeholders while advancing training and awareness to embed data protection throughout the organization.