Manager, Digital Operations & Governance

1. Develop, maintain and operationalise Group-wide policies, standards, procedures and control frameworks for data protection, cybersecurity, digital systems, artificial intelligence and technology governance.

2. Support the Data Protection Office in managing the data protection programme, including the Data Protection Manager network, data inventories, data flow reviews, data protection impact assessments, consent and retention controls, data access requests and incident or breach management.

3. Coordinate regulatory and compliance readiness relating to the Personal Data Protection Act, Health Information Act and other applicable healthcare, data protection and cybersecurity requirements.

4. Lead cybersecurity governance activities, including risk assessments, control reviews, vulnerability assessment and penetration testing follow-up, managed security operations oversight, remediation tracking, security awareness and incident-response preparedness.

5. Establish and monitor identity and access governance, including user access reviews, privileged access controls and joiner, mover and leaver processes in collaboration with HR, IT Operations and system owners.

6. Review and coordinate technology-related agreements and governance documents, including master service agreements, service-level agreements, data-processing agreements, confidentiality clauses, cybersecurity requirements, software licensing terms and renewal obligations, in consultation with the relevant business, procurement and legal stakeholders.

7. Maintain governance registers for systems, vendors, agreements, risks, audit findings, regulatory obligations, exceptions and remediation actions, with timely escalation of material gaps

8. Develop, integrate and maintain Power BI dashboards and Microsoft Power Automate workflows to support operational reporting, process automation and digitalisation across the organisation.

9. Oversee vendor and managed service provider governance, including due diligence, performance and service-level reviews, security and data-protection requirements, contract compliance and service improvement actions.

10. Define and support digital operating controls for solution onboarding, change management, system ownership, access, documentation, backup, business continuity, disaster recovery and technology offboarding.

11. Coordinate internal and external audits, regulatory assessments and management reviews; ensure findings are assigned, monitored and closed with appropriate evidence.

12. Develop governance dashboards, management reports and risk updates for management committees and relevant stakeholders.

13. Plan and deliver staff awareness, briefings and practical guidance on data protection, cybersecurity, responsible AI use and digital governance requirements.

14. Partner with IT Operations, project teams and business units to embed governance and security requirements throughout the system and project lifecycle.

15. Supervise and develop team members, allocate work priorities and promote consistent documentation, accountability and continuous improvement.

16. Perform such other duties and responsibilities that may be assigned from time to time.