We are seeking a dynamic and highly motivated Senior Associate Lead - Privacy Strategy & Compliance to strengthen our privacy governance framework and drive privacy compliance across the organization.

This role is ideal for a professional who is passionate about data protection, privacy governance, risk management, and regulatory compliance. You will work closely with business and technology teams to embed privacy-by-design principles, manage privacy risks, and ensure compliance with evolving regulatory requirements.

The Job

• Own and continuously enhance the Group’s privacy governance framework, including policies, standards, guidelines, procedures and supporting governance mechanisms.
• Partner with business and technology teams throughout project lifecycles to embed privacy-by-design principles and ensure compliance with regulatory requirements, including the Personal Data Protection Act.
• Act as a subject matter expert on privacy and data protection matters, providing guidance on privacy requirements across business and technology functions.
• Monitor regulatory developments and emerging technologies to ensure the privacy framework remains current and effective.
• Develop and deliver privacy awareness initiatives, training programs and communications to strengthen privacy culture, and policy adoption across the Group.

• Support the Privacy Team in conducting privacy impact assessments (PIAs/ DPIAs) and privacy risk assessments across business processes, systems, projects, and data flows to identify and mitigate privacy risks, and provide practical recommendations to strengthen privacy compliance and risk management.
• Maintain Records of Processing Activities (RoPA).
• Lead third-party privacy risk assessments, evaluate vendor controls, monitor remediation of identified issues, and provide risk reporting to management.
• Lead privacy compliance reviews and monitor closure of identified gaps.

• Validate compliance evidence and assess the effectiveness of privacy controls.
• Coordinate audits, assessments, and compliance assurance activities.
• Manage compliance exceptions and support ongoing compliance monitoring.

• Lead privacy incident management and remediation activities.

• Prepare privacy risk, compliance, KPIs, and progress reports for senior management and governance committees.
• Collaborate with internal and external stakeholders to drive continuous improvement in privacy maturity.
• Identify opportunities to leverage automation and technology to enhance privacy governance, monitoring and reporting.

The Person

• B.Sc. Engineering degree or a similar degree in Computer Science, Information Technology, Electronics, Telecommunications, Engineering, or a related discipline.
• A professional privacy certification, such as Certified Information Privacy Manager (CIPM), is mandatory for this role or must be obtained within an agreed timeframe following appointment.
• The following certifications will be considered an added advantage: Certified Information Privacy Technologist (CIPT), Certified Data Privacy Solutions Engineer (CDPSE), Cisco Certified Network Professional (CCNP), ISO 27701 Lead Implementer, ISO 27001 Lead Auditor.

• Minimum 5 years of experience in three or more of the following areas: IT, Information Security, Telecommunications, Privacy, Data Governance, Technology Assurance, Internal Audit, Risk, Compliance, or related fields.

• Strong knowledge of privacy governance, data protection, and compliance practices.
• Ability to translate complex technical and privacy requirements into practical business solutions.
• Strong stakeholder management and communication skills.
• Experience in risk assessment, compliance monitoring, and privacy advisory.
• Analytical mindset with a proactive approach to problem-solving.
• Ability to work independently and influence cross-functional teams.