The Data Protection Executive/AM will lead and conduct comprehensive data protection impact assessment (DPIAs) to ensure the protection of personal data and compliance with data protection regulations. You will work closely with various departments to identify privacy risks, recommend mitigation strategies, and ensure that privacy measures align with organizational and regulatory requirements.
Key Responsibilities:
- Impact Assessment: Lead and conduct data protection impact assessments (DPIAs) to evaluate the potential impact of projects, systems, and processes on data protection and compliance.
- Risk Identification and Evaluation: Identify data protection risks associated with new and existing technologies, business processes, and third-party relationships; evaluate the potential impact on data subjects and organizational operations.
- Mitigation Strategies: Develop and recommend mitigation strategies and controls to address identified data protection risks and reduce their impact.
- Compliance Assurance: Ensure that risk assessments and mitigation strategies comply with the Singapore Personal Data Protection Act and all relevant data privacy regulations and industry standards.
- Privacy by Design: Integrate privacy risk assessments into the design and development phases of projects and systems, ensuring that data protection is considered from the outset.
- Incident Management: Respond to data privacy incidents and breaches by assessing the impact, coordinating response efforts, and implementing corrective actions to prevent recurrence.
- Training and Awareness: Educate employees on risk assessment processes and the importance of data privacy through training programs and awareness campaigns.
- Documentation and Reporting: Maintain detailed records of risk assessments, mitigation actions, and compliance efforts; prepare reports for senior management and regulatory authorities as needed.
Qualifications:
- Degree in any discipline. Information Technology or Cybersecurity or related field is preferred.
- Relevant certifications in data protection and with at least 2 years of experience in personal data protection work
- Possess excellent communication and report writing skills
- Self-motivated and able to work well independently
