Manager Global Data Privacy

Key Responsibilities

Regulatory Compliance

• Ensure organization-wide compliance with the Malaysian Personal Data Protection Act (PDPA) the Sri Lanka Personal Data Protection Act (PDPA) and Indonesias Law No. 27 of 2022 on Personal Data Protection
• Track regulatory developments across all three jurisdictions and update internal policies standards and procedures accordingly
• Maintain and continuously improve the organizations Information Security Management System (ISMS) and Privacy Information Management System (PIMS) in line with ISO 27001 and ISO 27701

Privacy by Design & Impact Assessments

• Conduct Privacy by Design (PbD) assessments across new and existing platforms products and projects
• Conduct Data Protection Impact Assessments (DPIAs) identify privacy risks and recommend practical mitigation measures
• Partner with product engineering and business teams to embed privacy controls from the earliest stages of design

Governance & Project Management

• Manage multiple concurrent privacy projects across markets prioritizing effectively to meet deadlines
• Develop maintain and enforce data privacy policies standards and procedures group-wide
• Support internal and external audits related to ISO 27001 ISO 27701 and data protection compliance
• Manage data subject requests privacy incidents and breach response processes

Training & Awareness

• Design and deliver data privacy awareness programs for all staff including teams in Malaysia Sri Lanka and Indonesia
• Build a sustained culture of privacy awareness through training sessions communications and periodic refreshers

Stakeholder & Team Management

• Liaise effectively with offshore and local teams Axiata Group regulators and business units to ensure consistent privacy practices region-wide
• Report on privacy compliance status risks and incidents to senior management and the group

Person Specifications

• Strong analytical and risk-assessment mindset
• Excellent project management and organizational skills
• Cross-cultural communication and regional sensitivity across Malaysia Sri Lanka and Indonesia
• Proven ability to manage multiple projects simultaneously across different markets and time zones
• Ability to translate legal and regulatory requirements into practical business-friendly processes
• High attention to detail and integrity in handling confidential information
• Excellent communication and stakeholder management skills with the ability to deliver trainings to diverse audiences