Assistant Manager – Data Privacy

Assistant Manager – Data Privacy / Senior Associate Lead – Privacy Strategy & ComplianceResponsibilities Develop, maintain, and continuously enhance privacy policies, standards, procedures, and governance frameworks.Drive privacy by design practices across business processes, technology projects, and systems, ensuring compliance with applicable data protection regulations, including the Personal Data Protection Act (PDPA).Conduct and support Privacy Impact Assessments (PIAs/DPIAs) and privacy risk assessments to identify risks and recommend appropriate mitigation measures.Provide privacy and data protection guidance to business, technology, and other stakeholder teams.Lead third-party privacy risk assessments, evaluate vendor controls, and monitor remediation of identified compliance gaps.Conduct privacy compliance reviews, validate control effectiveness, coordinate audits, and monitor corrective actions.Maintain Records of Processing Activities (RoPA) and support ongoing privacy compliance monitoring.Lead privacy incident management and remediation activities.Monitor regulatory developments and emerging technologies to strengthen privacy governance and compliance.Develop privacy awareness programs and training initiatives to promote a strong privacy culture across the organization.Prepare privacy risk reports, compliance updates, and KPIs for senior management and governance committees.Identify opportunities to leverage automation and technology to improve privacy governance, monitoring, and reporting.Expected Profile Bachelor's degree in Engineering, Computer Science, Information Technology, Electronics, Telecommunications, or a related discipline.Minimum 5 years of experience across three or more relevant areas, including IT, Information Security, Privacy, Data Governance, Technology Assurance, Internal Audit, Risk, or Compliance.Strong knowledge of privacy governance, data protection, risk assessment, and regulatory compliance practices.Experience in privacy advisory, compliance monitoring, risk assessments, or technology governance.Ability to translate technical and regulatory requirements into practical business solutions.Strong analytical, communication, stakeholder management, and problem-solving skills.Ability to work independently and influence cross-functional teams.Mandatory: Certified Information Privacy Manager (CIPM), or willingness to obtain the certification within an agreed timeframe following appointment.Added Advantage: CIPT, CDPSE, ISO 27701 Lead Implementer, ISO 27001 Lead Auditor, or CCNP.Share your updated CV to careers@talentexpress.lkFollow our LinkedIn page for upcoming vacancies WhatsApp – 0779 391 791