Senior Data Privacy & Compliance Specialist

HURELAX PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

HURELAX PTE. LTD. is seeking a Senior Data Privacy & Compliance Specialist to enhance the global privacy framework and drive ongoing compliance across regions. The role collaborates with legal, security, engineering and product teams to identify risks and implement robust controls.

The candidate will monitor GDPR, CCPA/CPRA and PDPA-like regimes, draft policies, manage data subject requests, deliver trainings, and support audits and incident management in a fast‑paced, global environment.

Qualifications

• Bachelor's degree or equivalent in law, information security, CS or related field.
• 3+ years in data privacy, data protection or regulatory compliance.
• Strong knowledge of GDPR/CCPA and related privacy regimes.
• Ability to translate regulatory requirements into practical controls.
• Experience communicating with international stakeholders.
• Capable of managing confidential information with discretion.

Responsibilities

• Monitor international privacy laws, guidance and standards.
• Develop and improve privacy governance policies and controls.
• Draft and maintain privacy notices and governance docs.
• Design privacy workflows and manage data subject rights processes.
• Deliver privacy training to employees and global teams.
• Support audits and incident response planning.
• Collaborate with legal, security, product and engineering teams.

Skills

English proficiency

Analytical thinking

Stakeholder mgmt

Education

Bachelor's degree in Law/InfoSec/CS

Job description

Job Overview

We are looking for a Senior Data Privacy & Compliance Specialist to support the development, implementation, and continuous improvement of our global privacy compliance framework.

The successful candidate will work closely with legal, security, engineering, product, and business teams to identify privacy risks, develop effective controls, and support compliance with applicable international data protection requirements.

Key Responsibilities

1. Global Privacy Regulatory Monitoring

• Research and monitor developments in international privacy and personal data protection laws, regulations, regulatory guidance, and industry standards.

• Provide practical advice on the implications of regulatory changes for the company's international operations.

• Assess the applicability of regulations such as GDPR, CCPA/CPRA, Singapore's PDPA, China's PIPL and Cybersecurity Law, and other relevant jurisdiction-specific requirements.

2. Privacy Governance and Compliance Framework

• Develop, implement, and continuously improve privacy governance policies, procedures, and internal controls.

• Support the integration of privacy compliance requirements into business operations, product development, and international expansion.

• Work with relevant stakeholders to monitor implementation of compliance requirements and remediation plans.

3. Privacy Policies and Data Governance

• Draft, review, and maintain privacy notices, internal privacy policies, and related governance documentation.

• Establish appropriate standards and procedures governing personal data collection, use, storage, disclosure, transfer, retention, and deletion.

• Ensure privacy-related documentation is clear, accurate, and aligned with applicable regulatory requirements.

4. Privacy Process Design and Improvement

• Design and improve privacy-related workflows, including consent management, data subject rights requests, and personal data handling procedures.

• Support privacy impact assessments and reviews of new products, features, and business initiatives.

• Collaborate with technical teams to incorporate privacy-by-design principles into operational processes.

5. Privacy Awareness and Training

• Develop and deliver privacy compliance training for employees and international business teams.

• Promote awareness of data protection responsibilities and appropriate personal data handling practices.

6. Compliance Monitoring and Audits

• Conduct periodic privacy compliance reviews and internal assessments.

• Identify privacy risks, control gaps, and potential regulatory exposures.

• Recommend and monitor corrective actions to strengthen compliance effectiveness.

• Support internal and external privacy-related audits.

7. Privacy Incident Management

• Develop and maintain privacy incident response procedures and escalation protocols.

• Coordinate with legal, security, technology, and business teams during suspected or confirmed personal data incidents.

• Support incident investigations, impact assessments, remediation, and regulatory or individual notifications where legally required.

• Assist with communications involving relevant regulatory authorities and affected stakeholders.

Requirements

• Bachelor's degree in Law, Information Security, Computer Science, or a related discipline, or equivalent relevant professional experience.

• At least 3 years of relevant experience in data privacy, data protection, or regulatory compliance.

• Sound knowledge of major international privacy regulations, particularly GDPR and CCPA/CPRA, with the ability to interpret and apply relevant requirements.

• Familiarity with data security principles, including encryption, access controls, and personal data governance.

• Strong English communication skills, including the ability to review regulatory materials, prepare policies, and communicate with international stakeholders.

• Strong analytical, risk assessment, problem-solving, and stakeholder management capabilities.

• Ability to manage sensitive matters professionally and maintain strict confidentiality.

• Ability to work effectively across legal, technical, and commercial teams.

Preferred Qualifications

• Experience in multinational organisations, consumer internet businesses, gaming, or financial services.

• Experience supporting regulatory investigations, privacy incident response, or major privacy compliance projects.

• Relevant professional certifications, such as CIPP/E, CIPP/US, CIPM, or CIPT.