Senior Data Privacy & Compliance Specialist

Your tasks

We are looking for a Senior Data Privacy & Compliance Specialist to support the development, implementation, and continuous improvement of our global privacy compliance framework.

The successful candidate will work closely with legal, security, engineering, product, and business teams to identify privacy risks, develop effective controls, and support compliance with applicable international data protection requirements.

1. Global Privacy Regulatory Monitoring

• Research and monitor developments in international privacy and personal data protection laws, regulations, regulatory guidance, and industry standards.
• Provide practical advice on the implications of regulatory changes for the company's international operations.
• Assess the applicability of regulations such as GDPR, CCPA/CPRA, Singapore's PDPA, China's PIPL and Cybersecurity Law, and other relevant jurisdiction-specific requirements.

2. Privacy Governance and Compliance Framework

• Develop, implement, and continuously improve privacy governance policies, procedures, and internal controls.
• Support the integration of privacy compliance requirements into business operations, product development, and international expansion.
• Work with relevant stakeholders to monitor implementation of compliance requirements and remediation plans.

3. Privacy Policies and Data Governance

• Draft, review, and maintain privacy notices, internal privacy policies, and related governance documentation.
• Establish appropriate standards and procedures governing personal data collection, use, storage, disclosure, transfer, retention, and deletion.
• Ensure privacy-related documentation is clear, accurate, and aligned with applicable regulatory requirements.

4. Privacy Process Design and Improvement

• Design and improve privacy-related workflows, including consent management, data subject rights requests, and personal data handling procedures.
• Support privacy impact assessments and reviews of new products, features, and business initiatives.
• Collaborate with technical teams to incorporate privacy-by-design principles into operational processes.

5. Privacy Awareness and Training

• Develop and deliver privacy compliance training for employees and international business teams.
• Promote awareness of data protection responsibilities and appropriate personal data handling practices.

6. Compliance Monitoring and Audits

• Conduct periodic privacy compliance reviews and internal assessments.
• Identify privacy risks, control gaps, and potential regulatory exposures.
• Recommend and monitor corrective actions to strengthen compliance effectiveness.
• Support internal and external privacy-related audits.

7. Privacy Incident Management

• Develop and maintain privacy incident response procedures and escalation protocols.
• Coordinate with legal, security, technology, and business teams during suspected or confirmed personal data incidents.
• Support incident investigations, impact assessments, remediation, and regulatory or individual notifications where legally required.
• Assist with communications involving relevant regulatory authorities and affected stakeholders.

Requirements

• Bachelor's degree in Law, Information Security, Computer Science, or a related discipline, or equivalent relevant professional experience.
• At least 3 years of relevant experience in data privacy, data protection, or regulatory compliance.
• Sound knowledge of major international privacy regulations, particularly GDPR and CCPA/CPRA, with the ability to interpret and apply relevant requirements.
• Familiarity with data security principles, including encryption, access controls, and personal data governance.
• Strong English communication skills, including the ability to review regulatory materials, prepare policies, and communicate with international stakeholders.
• Strong analytical, risk assessment, problem-solving, and stakeholder management capabilities.
• Ability to manage sensitive matters professionally and maintain strict confidentiality.
• Ability to work effectively across legal, technical, and commercial teams.

• Experience in multinational organisations, consumer internet businesses, gaming, or financial services.
• Experience supporting regulatory investigations, privacy incident response, or major privacy compliance projects.
• Relevant professional certifications, such as CIPP/E, CIPP/US, CIPM, or CIPT.