Privacy & Data Protection Counsel (SG or HK)

NOVA8; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NOVA8 is seeking a Privacy & Data Protection Counsel (SG or HK) with 3–6 years PQE and fluent Mandarin to join its global legal team. Reporting to the Head of Privacy & Data Protection, you will drive global privacy compliance, manage cross-border transfers, and support cybersecurity and AI regulation initiatives.

The role requires English and Mandarin fluency, Singapore/HK base, and a mix of top-tier law firm training with in-house exposure.

Qualifications

• Fluency in English and Mandarin Chinese.
• 3–6 years of legal practice in data privacy, cybersecurity or emerging tech.
• Major law firm training with in-house experience preferred.

Responsibilities

• Maintain and update global privacy frameworks across international units.
• Partner with engineering teams to embed privacy-by-design and responsible AI principles.
• Draft, review and negotiate DPAs and data privacy clauses in contracts.
• Manage data incident responses, regulatory notifications and monitor evolving laws (GDPR, CPRA, EU AI Act).

Skills

Mandarin

English

Education

Licensed lawyer (Singapore/HK/US/UK/Canada)

Job description

Role Title: Privacy & Data Protection Counsel (SG or HK)

About the Role:

We are seeking a junior to mid-level Privacy Legal Counsel (3–6 years PQE), fluent in Mandarin, to join the global legal team of a major digital entertainment and technology MNC. Reporting to the Head of Privacy & Data Protection, you will manage global privacy compliance, drive privacy-by-design initiatives, oversee cross-border data transfers, and support cybersecurity and emerging AI regulations.

Key Responsibilities

• Compliance & Policies: Maintain and update global privacy frameworks across international business units.
• Product & AI Counseling: Partner with engineering teams to embed privacy-by-design and responsible AI principles.
• Risk & Contracts: Conduct DPIAs and draft, review, and negotiate Data Processing Agreements (DPAs) and commercial privacy clauses.
• Incident Response & Monitoring: Manage data incident responses, regulatory notifications, and track evolving global laws (GDPR, CCPA/CPRA, EU AI Act).

Requirements

• Qualifications: Qualified lawyer in Singapore, Hong Kong, the U.S., UK, or Canada.
• Experience: 3 to 6 years of legal practice specializing in data privacy, cybersecurity, and/or emerging tech.
• Background: Major law firm training combined with in-house experience is preferred.
• Language Skills: Fluency in both English and Mandarin Chinese is required.
• Location: Must currently be based in Singapore or Hong Kong.