Manager - Compliance (Data Governance and Privacy) at Hong Leong Bank in HLT-Hong Leong Tower

Job description

If you are looking to excel and make a difference, take a closer look at us… Job Overview The Manager, Data Governance and Privacy serve as a Subject Matter Expert (SME) in personal data protection laws and banking regulatory frameworks related to customer data. Reporting to the Senior Manager, Data Governance and Privacy, the Manager is responsible for driving the Bank’s compliance with the Personal Data Protection Act 2010 (PDPA), Financial Services Act 2013 (FSA), Islamic Financial Services Act 2013 (IFSA) and Bank Negara Malaysia (BNM) standards including Management of Customer Information and Permitted Disclosure (MCIPD). This role requires a proactive compliance leader capable of providing expert advisory support across business and support units, executing in-depth privacy gap assessments, performing holistic data breach evaluations including containment strategies, managing regulatory notifications and maintaining professional relations with both internal and external stakeholders. Job Responsibilities Advisory Support PDPA Advisory Support: Provide authoritative, day-to-day regulatory advisory support to business units on all aspects of the Personal Data Protection Act 2010 (PDPA), including data processing principles, lawful basis for processing, cross-border transfers, data subject rights, consent mechanisms, and privacy notices. MCIPD Advisory Support: Act as the primary advisor on BNM’s Management of Customer Information and Permitted Disclosures (MCIPD) policy document, guiding business operations on customer confidentiality obligations, statutory secrecy requirements under FSA/IFSA, conditions for permitted disclosures, and customer information handling. Provide advisory guidance during the conceptualization, design, and launch of new banking products, digital initiatives, marketing campaigns, and technology solutions to embed Privacy-by-Design and MCIPD compliance. Risk Management & Assessment Lead and execute comprehensive, end-to-end privacy gap assessments and Data Privacy Impact Assessments (DPIAs) for operational processes, and systems. Manage risks related to cross-jurisdictional data transfers, including Transfer Impact Assessments (for Advanced Tier). Assess risks associated with emerging technologies like Artificial Intelligence (AI) and Machine Learning (ML). Governance & Incident Management Develop, review, and continuously update policies, privacy notices, and standard operating procedures (SOPs). Lead the incident management response workflow, serving as a primary compliance contact for responding to data breaches and customer data exposure incidents. Conduct holistic assessments of data incidents/breaches, analyzing root causes, extent of affected customer information under FSA/IFSA/MCIPD and PDPA, operational impact, financial exposure, legal liability, and reputational risk. Comprehensive incident assessment reports, review senior management and board update, and mandatory breach notification filings to external regulators (e.g., PDPC, Bank Negara Malaysia) within stipulated regulatory timelines. Stakeholder Engagement Engage and manage relationships professionally with internal stakeholders (Business Units and Support Units) to integrate privacy-by-design and MCIPD compliance controls into business operations. Design and deliver targeted training sessions and awareness campaigns to embed a culture of privacy and customer data protection across the bank. Others Such additional responsibilities that the PDPC or the Bank may include from time to time (e.g. as a result of technological developments). Job Requirements Bachelor’s Degree (Professional certification in privacy is a plus). 5 years of experience in data governance, data privacy, or regulatory compliance within banking or financial institutions In-depth subject matter expertise (SME) in key Malaysian financial and privacy laws/guidelines: Personal Data Protection Act 2010 (PDPA) and PDPC guidelines/codes of practice. BNM Policy Document o