Manager - Global Data Privacy

Key Responsibilities

Regulatory Compliance

• Ensure organization-wide compliance with the Malaysian Personal Data Protection Act (PDPA), the Sri Lanka Personal Data Protection Act (PDPA), and Indonesia's Law No. 27 of 2022 on Personal Data Protection
• Track regulatory developments across all three jurisdictions and update internal policies, standards and procedures accordingly
• Maintain and continuously improve the organization's Information Security Management System (ISMS) and Privacy Information Management System (PIMS) in line with ISO 27001 and ISO 27701

Privacy by Design & Impact Assessments

• Conduct Privacy by Design (PbD) assessments across new and existing platforms, products and projects
• Conduct Data Protection Impact Assessments (DPIAs), identify privacy risks, and recommend practical mitigation measures
• Partner with product, engineering and business teams to embed privacy controls from the earliest stages of design

Governance & Project Management

• Manage multiple concurrent privacy projects across markets, prioritizing effectively to meet deadlines
• Develop, maintain and enforce data privacy policies, standards and procedures group-wide
• Support internal and external audits related to ISO 27001, ISO 27701 and data protection compliance
• Manage data subject requests, privacy incidents and breach response processes

Training & Awareness

• Design and deliver data privacy awareness programs for all staff, including teams in Malaysia, Sri Lanka and Indonesia
• Build a sustained culture of privacy awareness through training sessions, communications and periodic refreshers

Stakeholder & Team Management

• Liaise effectively with offshore and local teams, Axiata Group, regulators and business units to ensure consistent privacy practices region-wide
• Report on privacy compliance status, risks and incidents to senior management and the group

Person Specifications

• Strong analytical and risk-assessment mindset
• Excellent project management and organizational skills
• Cross-cultural communication and regional sensitivity across Malaysia, Sri Lanka and Indonesia
• Proven ability to manage multiple projects simultaneously across different markets and time zones
• Ability to translate legal and regulatory requirements into practical, business-friendly processes
• High attention to detail and integrity in handling confidential information
• Excellent communication and stakeholder management skills, with the ability to deliver trainings to diverse audiences