Data Protection Officer (6 months contract) - Insurance Industry (ID:714646)

PERSOL Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Persol Singapore seeks a Data Protection Officer to lead our privacy program and ensure PDPA compliance, with GDPR considerations where relevant. You will establish, implement and review data protection policies and frameworks, and act as the primary liaison with regulators.

You will conduct DPIAs, guide internal stakeholders on privacy requirements, handle data breach incidents, review vendor contracts, and drive awareness initiatives to strengthen governance across the organisation.

Qualifications

• Experience in data privacy, data protection, governance or compliance.
• Knowledge of PDPA and relevant regulatory requirements.
• Ability to implement policies, controls and compliance frameworks.

Responsibilities

• Act as the appointed Data Protection Officer (DPO) overseeing compliance with data protection laws.
• Establish and review data protection policies, procedures, and frameworks.
• Monitor compliance with privacy regulations including PDPA and GDPR where relevant.
• Conduct DPIAs and mitigate privacy risks in business processes.
• Provide guidance to internal stakeholders on data protection requirements.
• Manage personal data breach incidents and regulatory notifications where required.
• Serve as the primary contact for regulatory authorities on privacy matters.
• Develop data protection awareness initiatives and training sessions.
• Maintain records of processing activities for regulatory reviews.
• Strengthen data protection governance and protect vendor data obligations.

Skills

Data protection

Regulatory compliance

DPIA experience

Stakeholder engagement

Education

Bachelor's degree in Law, Business, or related discipline

CIPP / CIPM certification (advantage)

Job description

Responsibilities:

• Act as the appointed Data Protection Officer (DPO), overseeing compliance with relevant data protection laws and regulatory requirements.
• Establish, implement, and regularly review data protection policies, procedures, and frameworks to ensure the proper handling and safeguarding of personal data.
• Monitor compliance with applicable privacy regulations, including Singapore's PDPA and GDPR where relevant, as well as internal data protection policies.
• Conduct and assess Data Protection Impact Assessments (DPIAs) to identify potential privacy risks and recommend appropriate mitigation measures for new and existing business processes.
• Provide guidance to internal stakeholders on data protection requirements, privacy risks, and compliance best practices.
• Manage personal data breach incidents, including investigations, regulatory notifications where required, and follow-up remediation measures.
• Serve as the key point of contact for regulatory authorities and external agencies on data protection and privacy-related matters.
• Develop and conduct data protection awareness initiatives and training sessions to strengthen employees' understanding of privacy obligations and compliance practices.
• Maintain proper documentation and records of personal data processing activities to support regulatory reviews, internal audits, and compliance assessments.
• Strengthen data protection governance by integrating appropriate controls and practices into business operations and organizational processes.
• Review contracts and agreements with vendors and third parties to ensure appropriate data protection obligations and safeguards are in place.

Requirements:

• 4-5 years of relevant experience in data privacy, data protection, compliance, or governance, preferably within data-intensive industries or risk-related functions.
• Bachelor's degree in Law, Business, or a related discipline. Professional certifications such as CIPP, CIPM, or a recognised DPO qualification would be an advantage.
• Good understanding of applicable data protection legislation and regulatory requirements, particularly Singapore's Personal Data Protection Act (PDPA).
• Practical experience in conducting DPIAs and implementing or managing data protection policies, controls, and compliance frameworks.
• Strong analytical, organizational, and communication skills, with the ability to engage stakeholders and manage compliance matters effectively.
• Self‑motivated and able to work independently while collaborating with cross‑functional teams to implement and drive data protection initiatives.