Data Protection Officer / Privacy Lead
Recruit123 is partnering with our client, an established enterprise in Singapore, to hire a Data Protection Officer / Privacy Lead. In this role, you will lead the organization's privacy governance framework, ensuring full operational and regulatory compliance with the Singapore Personal Data Protection Act (PDPA) and international privacy regimes, while fostering a strong culture of data ethics and privacy-by-design across business functions.
Key Responsibilities:
Serve as the designated Data Protection Officer (DPO) and primary liaison for the Personal Data Protection Commission (PDPC) and external regulatory bodies.
Design, implement, and maintain the organization’s Data Protection Management Programme (DPMP) and operational privacy policies.
Conduct Data Protection Impact Assessments (DPIAs) across new IT systems, AI/ML tools, marketing workflows, and vendor engagements.
Manage the end-to-end data incident response protocol, leading investigations, root cause analyses, remediation plans, and regulatory/data subject breach notifications.
Oversee Data Subject Access Requests (DSARs), consent withdrawal mechanisms, data retention schedules, and secure disposal processes.
Review and negotiate Data Processing Agreements (DPAs), cross-border data transfer mechanisms, and third-party vendor risk assessments alongside legal and procurement teams.
Spearhead internal readiness for industry certifications, including the Data Protection Trustmark (DPTM).
Develop and deliver company-wide data protection training and privacy awareness initiatives.
Advise executive leadership and product teams on emerging privacy regulations, AI governance, and regional cross-border data compliance (e.g., GDPR, APAC privacy laws).
Requirements:
Degree in Law, Information Security, Computer Science, Business Administration, or a related discipline.
Minimum 5 to 8 years of direct experience in data privacy, PDPA compliance, information governance, or regulatory compliance.
Deep knowledge of Singapore’s Personal Data Protection Act (PDPA) and PDPC advisory guidelines; familiarity with global standards (GDPR) is advantageous.
Industry certifications strongly preferred (e.g., IAPP CIPP/A, CIPM, CIPT, or Practitioner Certificate in Personal Data Protection).
Demonstrated experience leading DPIAs, managing breach incidents, and operationalizing data governance programs.
Strong communication and stakeholder management skills, with the ability to translate legal and technical privacy requirements into practical business workflows.
What’s on Offer:
Competitive monthly base salary ranging from SGD 7,500 to SGD 11,000, tailored to depth of privacy experience and credentials.
High-visibility leadership role reporting directly into executive management and the risk committee.
Opportunity to spearhead Data Protection Trustmark (DPTM) certification and regional data governance expansion.
Comprehensive healthcare benefits and flexible hybrid work environment.
Recruit123 Pte Ltd
EA Personnel: Lian Cher Chieh (Steffan)
EA Personnel Registration No.: R1217705
EA License No.: 25C2810EA
steffan.lian@recruit-123.com