Global Data Privacy & AI Governance Counsel

OSL; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

OSL seeks an experienced Legal Counsel to coordinate data protection, privacy, and AI governance across a global footprint including Singapore. The role reports to the General Counsel and requires credible interaction with regulators and engineering teams.

The candidate will hold statutory DPO seats where eligible, lead RoPA and cross-border registers, and drive privacy-by-design and AI governance in a fintech/crypto environment.

Qualifications

• Qualified lawyer with 5+ years of PQE in fintech, securities, payments or crypto.
• Meaningful exposure to data protection and privacy frameworks (GDPR, UK GDPR, PDPA, Bermuda PIPA, Australian Privacy Act).
• Fluency in English and Mandarin or Cantonese.
• Hands-on experience drafting DPAs, SCCs, and transfer docs; handling data breaches/regulator notifications.

Responsibilities

• Hold the designated DPO/Privacy Officer seat for each in-scope entity and act as single point of contact for supervisory authorities.
• Own RoPA, retention and cross-border transfer registers and the relevant laws and regulations.
• Advise Product, Engineering, Security and Risks on privacy-by-design, and lead AI governance, including model inventory and AI Act risk classification.
• Draft and negotiate DPAs, SCCs and outsourcing terms, aligning GDPR Art. 28, MiCAR Art. 73 and DORA Art. 30(3).
• Own the multi-jurisdiction incident and breach matrix and act as legal lead on live incidents.
• Supervise data subject rights operations and handle regulator-escalated requests.
• Deliver the group's annual privacy and AI training programme.

Skills

Data privacy

Regulatory liaison

Contract drafting

Stakeholder management

Education

PQE 5+ years

Job description

OSL seeks an experienced Legal Counsel to coordinate data protection, privacy, and AI governance across a global footprint including Singapore. The role reports to the General Counsel and requires credible interaction with regulators and engineering teams.

The candidate will hold statutory DPO seats where eligible, lead RoPA and cross-border registers, and drive privacy-by-design and AI governance in a fintech/crypto environment.