Global Data Privacy & AI Governance Counsel

Confidential Hires; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Confidential Hires, a globally regulated fintech company, seeks an experienced Legal Counsel to act as group Data Protection / Privacy and AI governance lead. You will hold statutory DPO appointments and work with regulators across EU/EEA, UK, Australia, Singapore, Bermuda, US and Brazil.

You will collaborate with product, engineering and security teams, manage RoPA and transfer regimes, draft DPAs and SCCs, oversee incident response, and drive the company’s privacy training program.

Qualifications

• Qualified lawyer with 5+ years of PQE in fintech, securities, payments, or crypto.
• Working knowledge of GDPR, UK GDPR, PDPA, Bermuda PIPA, or Australian Privacy Act is highly advantageous.
• Fluency in English and Mandarin or Cantonese is required.

Responsibilities

• Hold the designated DPO/Privacy Officer seat for in-scope entities and liaise with regulators.
• Own RoPA, retention, cross-border transfer registers and applicable privacy laws.
• Advise product, engineering, security and risks on privacy-by-design and AI governance.
• Draft and negotiate DPAs, SCCs, and outsourcing terms with GDPR Art.28 and applicable acts.
• Lead incident and breach response with legal oversight across jurisdictions.
• Oversee data subject rights operations and regulator escalations.
• Deliver annual privacy and AI training programmes.

Skills

Regulatory compliance

Privacy by design

DPO / data protection

Cross-functional collaboration

Stakeholder management

Education

Law degree / Qualified lawyer

Job description

Confidential Hires, a globally regulated fintech company, seeks an experienced Legal Counsel to act as group Data Protection / Privacy and AI governance lead. You will hold statutory DPO appointments and work with regulators across EU/EEA, UK, Australia, Singapore, Bermuda, US and Brazil.

You will collaborate with product, engineering and security teams, manage RoPA and transfer regimes, draft DPAs and SCCs, oversee incident response, and drive the company’s privacy training program.