Data Protection & IT Risk Lead

IBFSG - The Institute of Banking & Finance Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

The Institute of Banking and Finance Singapore (IBF) is seeking a lead Data Protection & Governance professional to act as DPO and drive PDPA compliance, privacy controls and risk oversight across the organisation.

You will guide IT and risk governance, advise on DPIAs, coordinate audits, and support the Data Protection TrustMark certification while liaising with business units and stakeholders.

Qualifications

• Strong knowledge of the PDPA and data governance practices.
• Experience in risk management, audit/compliance, incident management and stakeholder engagement.
• Good written and verbal communication skills and strong interpersonal skills.
• Familiarity with ISO/IEC 27001, NIST CSF, MAS TRM is an advantage.
• Hands-on IT security experience such as system audits and vulnerability scanning is an advantage.
• Knowledge of cloud security is an advantage.

Responsibilities

• Lead Data Protection Officer duties and ensure PDPA compliance.
• Develop and improve data protection policies and contracts.
• Drive Data Protection Trustmark certification initiatives.
• Advise on DPIAs and privacy-by-design practices.
• Support IT and cybersecurity risk governance reporting and incident response.
• Coordinate internal audits, risk assessments and governance reporting.
• Provide secretariat support for risk and audit committees.

Skills

PDPA knowledge

Data governance

Risk management

Audit/compliance

Incident management

Stakeholder engagement

Communication skills

Tools

PAM

IAM

SIEM

Firewall rules

System hardening

Job description

The Institute of Banking and Finance Singapore (IBF) is seeking a lead Data Protection & Governance professional to act as DPO and drive PDPA compliance, privacy controls and risk oversight across the organisation.

You will guide IT and risk governance, advise on DPIAs, coordinate audits, and support the Data Protection TrustMark certification while liaising with business units and stakeholders.