Director, Regional DPO Coordination and Governance

Sumitomo Mitsui Banking Corporation; Singapore; Vor Ort; SGD 180.000 - 280.000; Vollzeit

Zusammenfassung

Sumitomo Mitsui Banking Corporation (SMBC) is seeking a Senior Lead for regional data privacy governance in the APAC region, based in Singapore. You will oversee DPO coordination, ensure PDPA compliance, and drive privacy initiatives across multiple jurisdictions.

You will engage regulators, senior executives, and stakeholders while advancing training and awareness to embed data protection throughout the organization.

Qualifikationen

• Bachelor's degree required; advanced degree preferred.
• 12+ years in data privacy, data governance, compliance or risk management with regional leadership experience.
• Strong knowledge of Singapore PDPA and APAC privacy regulations.
• Experience in banking or highly regulated industries.
• Certifications such as CIPP/A, CIPM, CIPT, CDMP, CISSP, CISA or CRISC advantageous.

Aufgaben

• Lead and oversee SMBC's regional data privacy governance framework across APAC.
• Coordinate country DPOs to ensure consistent privacy controls.
• Provide guidance on Singapore PDPA and APAC privacy regulations.
• Monitor regulatory developments and drive compliance programs across jurisdictions.
• Oversee PIAs, privacy risk assessments, and remediation initiatives.
• Establish governance for cross-border data transfers and third-party processing.
• Lead privacy incident and breach management governance, including regulatory reporting.
• Deliver privacy reporting and insights to senior management and governance committees.
• Drive privacy awareness, training, and a culture of data protection.
• Collaborate with Legal, Compliance, Risk, Technology, Information Security, and business stakeholders on privacy initiatives.

Jobbeschreibung

Headquartered in Tokyo, Sumitomo Mitsui Banking Corporation (SMBC) is a leading global financial institution and a core member of Sumitomo Mitsui Financial Group (SMBC Group). Built upon our rich Japanese heritage since 1876, we put our customers first and provide seamless access to, from and within the Asia Pacific region. SMBC is one of the largest Japanese banks by assets and maintain strong credit ratings across our global integrated network. We work closely as one SMBC Group to offer personal, corporate and investment banking services to meet the needs of our customers.

With sustainability embedded within our strategy and operations, we are committed to creating a society in which today’s generation can enjoy economic prosperity and well-being, and pass it on to future generations.

Key Responsibilities

• Lead and enhance SMBC's regional data privacy governance framework across APAC.
• Coordinate and oversee country DPOs to ensure consistent implementation of privacy requirements and controls.
• Act as the regional subject matter expert on Singapore PDPA and provide guidance on APAC privacy regulations.
• Monitor regulatory developments and drive compliance programs across multiple jurisdictions.
• Oversee Privacy Impact Assessments (PIAs), privacy risk assessments, and remediation initiatives.
• Establish governance and controls for cross-border data transfers and third-party data processing.
• Lead privacy incident and breach management governance, including regulatory reporting and escalation.
• Deliver privacy reporting and insights to senior management and governance committees.
• Drive privacy awareness, training, and a strong culture of data protection across the organization.
• Partner with Legal, Compliance, Risk, Technology, Information Security, and business stakeholders on privacy-related initiatives.

Requirements

• Bachelor's degree in Law, Information Systems, Risk Management, Business, or related field; advanced degree preferred.
• 12+ years of experience in data privacy, data governance, compliance, risk management, or related disciplines, with significant regional leadership experience.
• Strong knowledge of Singapore PDPA and other APAC privacy regulations, including cross-border data transfer requirements.
• Experience within banking, financial services, or other highly regulated industries.
• Proven ability to engage regulators, senior executives, and stakeholders across multiple jurisdictions.
• Strong leadership, communication, stakeholder management, and program delivery skills.
• Professional certifications such as CIPP/A, CIPM, CIPT, CDMP, CISSP, CISA, or CRISC are advantageous.