Senior Associate/ Manager, Data Security Compliance Lead- Regional

We are looking for a proficient data security specialist to join regional team. The candidate will be responsible for implementing our data protection governance programs and ensuring the company's compliance with relevant privacy laws, regulations, and corporate policies. This role requires both governance and technical skills involves creating data security strategies, work with technical team on identifying potential areas of data security issues, and participating in security audits.

Responsibilities:

• Lead regular reviews of data security policies, procedures, and practices to identify potential areas of compliance risks, recommending corrective action plans where necessary.
• Coordinate with different department leaders to ensure the organization-wide understanding and adherence to IT & Cybersecurity standards and regulatory requirements.
• Work closely with the IT, Tech, Cybersecurity and other relevant team to establish and maintain data security compliance.
• Act as the primary point of contact for all data security compliance matters and liaise with legal, compliance and external auditors, providing required information and ensuring that audit findings are properly addressed and corrected in a timely manner.
• Staying abreast of changes in laws and regulations that are relevant to data protection and privacy, and ensuring compliance.
• Develop, implement, and maintain a comprehensive data security program as per Lazada group data security policies to ensure adherence with ISO27001, PDPA, and other applicable privacy regulations and standards.

Requirements:

• Excellent communication skills, both written and verbal, with the ability to communicate complex compliance matters to non-technical stakeholders.
• Fluent in English both verbal and written
• At least 3-5 years of experience in data security compliance or PDPA or GDPR
• Strong understanding of IT & Cybersecurity principles controls and strategies.
• Proven experience in conducting cross border data security reviews and data disclosure review.
• Previous experience in a similar role in a multinational organisation.
• Knowledge of cybersecurity risks and information security standards.
• Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
• Certified Information Privacy Professional/Manager (CIPM) or Certified Information Privacy Technologist (CIPT), Certified Data Privacy Solutions Engineer (CDPSE) is an added advantage

Requirements/Qualifications(good to have):

• Proven experience in conducting cross border data security reviews and data disclosure review.
• Knowledge of cybersecurity risks and information security standards.
• Previous experience in a similar role in a multinational organisation.