Manager - Global Data Privacy
Bridge BSS Talent · Colombo, Western Province, Sri Lanka
Tailor my CV for this job — freePosition: Manager - Global Data Privacy
We empower businesses with cutting-edge AI solutions, scalable cloud infrastructure, and elite tech talent. Our teams work with some of the world’s most innovative companies to deliver measurable impact through technology.Job DescriptionRegulatory ComplianceEnsure organization-wide compliance with the Malaysian Personal Data Protection Act (PDPA), the Sri Lanka Personal Data Protection Act (PDPA), and Indonesia's Law No. 27 of 2022 on Personal Data ProtectionTrack regulatory developments across all three jurisdictions and update internal policies, standards and procedures accordinglyMaintain and continuously improve the organization's Information Security Management System (ISMS) and Privacy Information Management System (PIMS) in line with ISO 27001 and ISO 27701Privacy by Design & Impact AssessmentsConduct Privacy by Design (PbD) assessments across new and existing platforms, products and projectsConduct Data Protection Impact Assessments (DPIAs), identify privacy risks, and recommend practical mitigation measuresPartner with product, engineering and business teams to embed privacy controls from the earliest stages of designGovernance & Project ManagementManage multiple concurrent privacy projects across markets, prioritizing effectively to meet deadlinesDevelop, maintain and enforce data privacy policies, standards and procedures group-wideSupport internal and external audits related to ISO 27001, ISO 27701 and data protection complianceManage data subject requests, privacy incidents and breach response processesTraining & AwarenessDesign and deliver data privacy awareness programs for all staff, including teams in Malaysia, Sri Lanka and IndonesiaBuild a sustained culture of privacy awareness through training sessions, communications and periodic refreshersStakeholder & Team ManagementLiaise effectively with offshore and local teams, organization regulators and business units to ensure consistent privacy practices region-wideReport on privacy compliance status, risks and incidents to senior management and the groupRequirementsStrong analytical and risk-assessment mindsetExcellent project management and organizational skillsCross-cultural communication and regional sensitivity across Malaysia, Sri Lanka and IndonesiaProven ability to manage multiple projects simultaneously across different markets and time zonesAbility to translate legal and regulatory requirements into practical, business-friendly processesHigh attention to detail and integrity in handling confidential informationExcellent communication and stakeholder management skills, with the ability to deliver trainings to diverse audiences