Manager, Data Protection Compliance

singpost; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

SingPost seeks an experienced Compliance and Data Privacy lead to oversee the organisation's data protection framework and governance. You will support the Head of Compliance with quarterly Board reports, e-learning initiatives, and sanctions checks across the group.

You will independently drive data privacy projects, map data flows, and refresh the Group Policy Register to ensure a single source of truth for policies and SOPs across SingPost.

Qualifications

• Bachelor's degree in Law, Business Administration, Risk Management, Finance, Information Technology, or a related discipline.
• At least 5 years of experience in regulatory compliance or data privacy within a complex matrix organization.
• Experience in logistics, financial services, or other regulated industries is preferred.
• Data Privacy Certification is ideal
• Strong knowledge of data privacy laws and regulations (PDPA, GDPR).
• Ability to translate regulatory requirements into practical business solutions.

Responsibilities

• Develop, implement, and maintain compliance frameworks, policies, and procedures, including data privacy.
• Ensure operations comply with local and international regulations (PDPA, GDPR, Payment Services Act, Privacy Act, PCI Act).
• Monitor adherence to compliance standards and regulatory requirements across business units.
• Provide internal compliance advice to management and staff.
• Plan and deliver compliance training and awareness programs for all employees.
• Lead projects like Data Inventory Map rollout, Group Policy Register refresh, and Data Privacy Dashboard.
• Identify and mitigate compliance risks at the project planning stage.
• Perform compliance testing when needed and propose enhancements.

Skills

Regulatory compliance

Data privacy

Stakeholder management

Project management

Training & awareness

Audit & investigation

Analytical thinking

Communication

Regulatory updates

Education

Bachelor's degree in Law, Business Administration, Risk Management, Finance, IT, or related discipline

Tools

PDPA/GDPR knowledge

Job description

Job Description

The incumbent is responsible for overseeing SingPost's data protection framework and governance, while supporting the Head of Compliance in ensuring effective compliance oversight across the organisation. This includes preparing quarterly compliance reports for the Board, supporting the compliance e-learning project, and conducting sanctions checks.

The incumbent also independently leads and delivers data privacy projects with minimal supervision, ensuring successful execution and effective engagement with relevant stakeholders. Key projects include developing the organisation-wide Data Inventory Map, including the identification and mapping of SingPost's data flows, and revamping the Group Policy Register to ensure it remains the single source of truth for all policies and SOPs across SingPost.

Compliance Management

• Develop, implement, and maintain compliance frameworks, policies, and procedures, including those related to data privacy.
• Ensure business operations comply with local and international regulations (e.g., PDPA, GDPR, Payment Services Act, Privacy Act, Prevention of Corruption Act).
• Propose and implement effective controls to mitigate identified compliance gaps.

Monitoring & Reporting

• Monitor business units' adherence to compliance standards and regulatory requirements.
• Participate in compliance reviews, investigations, and management reporting.
• Provide regular inputs to the Head of Compliance on regulatory and compliance matters.
• Support Head of Compliance with timely investigation and reporting of personal data breaches.

Advisory & Guidance

• Provide internal compliance advice to business and management teams.
• Guide team members and colleagues on regulatory requirements and best practice to keep the organisation abreast on regulatory updates.

Training & Awareness

• Conduct compliance awareness briefings and staff training programs.
• Independently plan and execute training programmes and e-learning content to all employees.
• Ensure employees understand and adhere to policies, procedures, and regulatory obligations.

Project & Risk Participation

• Participate in projects with business and support units to ensure regulatory requirements are considered early.
• Identify and mitigate compliance risks at the project planning stage.
• Independently run and execute compliance projects with minimal supervision . These projects include the Data Inventory Map rollout, Group Policy Register refresh and Data Privacy Dashboard.

Continuous Improvement

• Identify gaps in compliance processes and propose enhancements. Perform compliance testing, if and when needed.
• Implement controls and monitoring activities to strengthen compliance posture.

Requirements

• Bachelor's degree in Law, Business Administration, Risk Management, Finance, Information Technology, or a related discipline.
• At least 5 years of experience in regulatory compliance or data privacy within a complex matrix organization.
• Experience in logistics, financial services, or other regulated industries is preferred.
• Data Privacy Certification is ideal
• Strong knowledge of data privacy laws and regulations, including PDPA and GDPR.
• Understanding of relevant regulatory, governance, risk, and compliance frameworks.
• Familiarity with compliance monitoring, audit, and investigation practices.
• Experience with regulated industries, preferably logistics or financial services/
• Strong written and verbal communication skills for reporting, advisory, and training.
• Strong analytical, problem-solving, and decision-making skills.
• Effective stakeholder management and collaboration skills.
• Ability to deliver compliance and data privacy training and awareness programmes.
• Good project management skills, with the ability to support cross-functional initiatives.
• Ability to independently manage and deliver compliance and data privacy projects.
• Ability to translate regulatory requirements into practical business solutions.
• Strong attention to detail and accuracy in compliance monitoring and reporting.
• Sound judgement, integrity, and professionalism in handling compliance matters.
• Ability to manage multiple priorities and adapt to changing regulatory requirements.
• Ability to influence and advise stakeholders on policies, controls, and compliance requirements.