Assistant Manager, Data Protection Office

Resorts World Sentosa; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

Resorts World Sentosa is seeking a Data Protection & Compliance professional to steward the company’s data protection program across its business units in Singapore. You will help ensure compliance with PDPA and relevant laws, review data clauses, and advise on risk and controls.

You will conduct DPIAs, train teams with the Legal function, monitor regulatory changes, and champion a culture of privacy by design within projects and vendor agreements.

Qualifications

• University degree required.
• CIPP/CIPM/CIPT or equivalent certification is a plus.

Responsibilities

• Support the company data protection framework across business units.
• Ensure compliance with data protection laws and policies.
• Review, audit and report data incidents and remedial actions.
• Conduct DPIs to mitigate risks and meet regulatory requirements.
• Advise stakeholders on data protection and innovation matters.
• Provide trainings on data protection regulations with Legal team.
• Assist with data access and correction requests.
• Monitor changes in data protection landscape and maintain documentation QA.

Skills

IT security

Compliance

Enterprise risk

Audit

PDPA experience

Stakeholder influence

Self-driven

Education

University degree

Job description

• Supporting the company’s various Business Units in their operations and targets while implementing reasonable safeguards and controls based on the company’s data protection framework, policies, procedures and processes.
• Ensure the company’s data protection framework complies with relevant data protection laws and regulations, and ensure business units’ adherence to data protection policies, procedures and processes.
• Support the review, audit and reporting of data incidents, including identifying control gaps, documenting findings and recommending appropriate remedial actions.
• Conduct Data Protection Impact Assessments (DPIAs) to assist internal stakeholder to reasonably mitigate risks or gaps to achieve business goals and regulatory compliance.
• Engage various stakeholders across the company to provide real time advisory on data protection and innovation matters or enquiries.
• Conduct trainings on data protection regulations, guidelines and to review into data protection related contractual obligations (alongside the Legal team).
• Provide assistance on data access and correction requests to various business units.
• Other duties include monitoring changes to the data protection landscape, annual internal review of processes, maintaining quality assurance of documentation to ensure accountability under relevant data protection laws and regulations.

Required Qualifications:

• University degree
• CIPP/CIPM/CIPT or other relevant certification is an added advantage

Skills:

• IT security, compliance, enterprise risk, audit or related background, with experience reviewing or negotiating data clauses or agreements, would be an advantage
• Minimum 3 years of regulatory compliance experience covering personal data protection or PDPA
• Comfortable working with multiple stakeholders, to influence and drive projects
• Self-driven, motivated with business-oriented mindset to deliver solutions and results