Data Protection Officer / Privacy Lead

RECRUIT123 PTE. LTD.; Singapore; Hybrid; SGD 84,000 - 123,000; Full time

Benefits offered by this job

Healthcare benefits

Flexible hybrid work environment

Professional development

Job summary

Recruit123 is partnering with an established enterprise in Singapore to hire a Data Protection Officer / Privacy Lead. You will lead the organization's privacy governance framework, ensuring full PDPA compliance and alignment with international privacy regimes, while fostering a culture of data ethics across business functions.

Key responsibilities include acting as the designated DPO for the PDPC, designing and maintaining the Data Protection Management Programme, conducting DPIAs across IT

Qualifications

• 5–8 years of direct experience in data privacy, PDPA compliance, information governance, or regulatory compliance.
• Deep knowledge of Singapore PDPA and PDPC guidelines; familiarity with GDPR is advantageous.
• Industry certifications strongly preferred (e.g., IAPP CIPP/A, CIPM, CIPT).
• Experience leading DPIAs, managing breach incidents, and operationalizing data governance programs.

Responsibilities

• Serve as the designated Data Protection Officer (DPO) and liaison for PDPC and regulators.
• Design, implement, and maintain the Data Protection Management Programme (DPMP) and privacy policies.
• Conduct DPIAs across IT systems, AI/ML tools, marketing workflows, and vendor engagements.
• Manage end-to-end data incident response, investigations, remediations, and breach notifications.
• Oversee Data Subject Access Requests (DSARs), consent withdrawal, data retention, and secure disposal.
• Review and negotiate DPAs, cross-border data transfer mechanisms, and third-party vendor risk assessments.
• Lead internal readiness for industry certifications like the Data Protection Trustmark (DPTM).
• Develop and deliver company-wide data protection training and privacy awareness initiatives.
• Advise executive leadership on emerging privacy regulations, AI governance, and regional data compliance.

Job description

Recruit123 is partnering with our client, an established enterprise in Singapore, to hire a Data Protection Officer / Privacy Lead . In this role, you will lead the organization's privacy governance framework, ensuring full operational and regulatory compliance with the Singapore Personal Data Protection Act (PDPA) and international privacy regimes, while fostering a strong culture of data ethics and privacy-by-design across business functions.

Key Responsibilities

• Serve as the designated Data Protection Officer (DPO) and primary liaison for the Personal Data Protection Commission (PDPC) and external regulatory bodies.
• Design, implement, and maintain the organization's Data Protection Management Programme (DPMP) and operational privacy policies.
• Conduct Data Protection Impact Assessments (DPIAs) across new IT systems, AI/ML tools, marketing workflows, and vendor engagements.
• Manage the end-to-end data incident response protocol, leading investigations, root cause analyses, remediation plans, and regulatory/data subject breach notifications.
• Oversee Data Subject Access Requests (DSARs), consent withdrawal mechanisms, data retention schedules, and secure disposal processes.
• Review and negotiate Data Processing Agreements (DPAs), cross-border data transfer mechanisms, and third-party vendor risk assessments alongside legal and procurement teams.
• Spearhead internal readiness for industry certifications, including the Data Protection Trustmark (DPTM).
• Develop and deliver company-wide data protection training and privacy awareness initiatives.
• Advise executive leadership and product teams on emerging privacy regulations, AI governance, and regional cross-border data compliance (e.g., GDPR, APAC privacy laws).

Requirements

• Degree in Law, Information Security, Computer Science, Business Administration, or a related discipline.
• Minimum 5 to 8 years of direct experience in data privacy, PDPA compliance, information governance, or regulatory compliance.
• Deep knowledge of Singapore's Personal Data Protection Act (PDPA) and PDPC advisory guidelines; familiarity with global standards (GDPR) is advantageous.
• Industry certifications strongly preferred (e.g., IAPP CIPP/A, CIPM, CIPT, or Practitioner Certificate in Personal Data Protection).
• Demonstrated experience leading DPIAs, managing breach incidents, and operationalizing data governance programs.
• Strong communication and stakeholder management skills, with the ability to translate legal and technical privacy requirements into practical business workflows.

What's on Offer

• Competitive monthly base salary ranging from SGD 7,500 to SGD 11,000, tailored to depth of privacy experience and credentials.
• High-visibility leadership role reporting directly into executive management and the risk committee.
• Opportunity to spearhead Data Protection Trustmark (DPTM) certification and regional data governance expansion.
• Comprehensive healthcare benefits and flexible hybrid work environment.