{"id":2922095,"url":"https://alion.io/job/singtel-data-protection-officer","title":"Data Protection Officer","company":{"id":49912,"name":"Singtel","domain":"singtel.com","url":"https://alion.io/company/singtel","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CAPA","optional":false}],"status":"live","first_seen_at":"2026-10-20T12:27:58Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T05:42:27Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Be a part of something BIG!\nSay HELLO to BIG Possibilities with Singtel GBS KL (Sudong MY Sdn Bhd)!\nSingtel is Asia's leading communications technology group, our presence spans across 21 countries in Asia, Australia, and Africa. We thrive on innovation, digital transformation, and harnessing next-generation technology to create a more sustainable and digital future. Now, we are bringing this energy to Kuala Lumpur with the launch of our brand-new Shared Services Centre!\nReporting to the GBS KL Site Lead, the Sudong Data Protection Officer (DPO) is responsible for providing independent oversight, governance, and monitoring of Sudong's compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and other applicable data protection and privacy requirements.\nThe DPO serves as the focal point for data protection matters within Sudong, ensuring that personal data is processed in accordance with legal, regulatory, and organisational requirements. The DPO operates independently in overseeing Sudong's privacy compliance and will work closely with the Singtel Group DPO and other Group Privacy Offices on matters relating to the personal data of Singtel and other Group entities.\nIn addition, the DPO oversees Sudong's compliance with its data protection obligations when Global Business Services (GBS) processes personal data on behalf of Singtel and other Group entities, ensuring appropriate governance, policies, controls, and risk management measures are in place to safeguard personal data and support regulatory compliance.\nMake an Impact by:\n1. Privacy Governance & Compliance\nOversee and monitor Sudong's compliance with MY PDPA and applicable privacy requirements.\nDevelop, maintain and roll out privacy policies, procedures and guidance across GBS.\nAdvise Sudong management and business functions on privacy requirements and risks.\nMonitor regulatory developments and recommend updates to policies, processes and controls.\nEscalate material privacy risks and compliance gaps to Sudong management.\n2. Data Protection Impact Assessments (DPIA)\nEstablish and manage the DPIA process for Sudong.\nAdvise and support business functions in conducting DPIAs where required.\nReview new projects, systems and processing activities for privacy risks.\nRecommend appropriate measures to mitigate identified privacy risks.\nPromote Privacy by Design across GBS.\n3. Personal Data Breach Management\nEstablish and oversee Sudong's personal data breach management process.\nCoordinate the assessment, investigation and management of privacy incidents.\nMaintain Sudong's Personal Data Breach Register.\nCoordinate notifications to the Malaysia Personal Data Protection Commissioner and affected individuals where required.\nPromptly escalate incidents involving personal data processed on behalf of Singtel or other Group entities to the relevant DPO/Privacy Office.\nMonitor corrective and preventive actions arising from incidents.\n4. Data Subject Rights\nOversee requests relating to Sudong-owned personal data, including access, correction, withdrawal of consent and other applicable rights.\nEnsure requests are handled in accordance with MY PDPA requirements and prescribed timelines.\n5. Third-Party Privacy Risk\nConduct or oversee privacy assessments for vendors handling Sudong personal data.\nEnsure appropriate privacy requirements and contractual safeguards are incorporated into vendor arrangements.\nMonitor significant third-party privacy risks and follow up on remediation.\n6. Compliance Monitoring\nConduct periodic privacy compliance reviews across GBS.\nMonitor adherence to MY PDPA, internal policies and privacy controls.\nIdentify compliance gaps and recommend corrective actions.\nTrack remediation and report significant issues to Sudong management.\n7. Training & Awareness\nDevelop and deliver MY PDPA training for GBS staff.\nEstablish privacy onboarding and refresher training requirements.\nPromote privacy awareness through eLearning, newsletters, posters, screensavers and other awareness activities.\nProvide practical guidance to staff on the appropriate handling of personal data.\n8. GBS Data Processor Oversight\nWhere GBS processes personal data on behalf of Singtel or other Group entities, the Sudong DPO will:\nMonitor Sudong's compliance with its Data Processor obligations.\nEnsure applicable privacy, security, retention and incident reporting requirements are implemented within GBS.\nCoordinate with the relevant Group DPO/Privacy Office where required.\nSupport DPIAs, compliance reviews, investigations and assurance activities relating to GBS processing.\nEnsure privacy incidents involving Group data are promptly escalated to the relevant Data Controller.\n9. Regulatory Engagement\nAct as Sudong's key contact for the Malaysia Personal Data Protection Commissioner on privacy matters.\nSupport regulatory enquiries, investigations and compliance activities.\nEnsure required DPO information and regulatory records are maintained and updated.\nQualifications\nBachelor's degree in Law, Information Technology, Information Security, Risk Management, Compliance, Business Administration, or a related discipline.\nProfessional certifications in data privacy, information security, risk, or compliance are preferred, such as:\nCertified Information Privacy Professional (CIPP/A, CIPP/E or equivalent)\nCertified Information Privacy Manager (CIPM)\nCertified Information Systems Security Professional (CISSP)\nCertified Information Security Manager (CISM)\nOther relevant privacy, governance, risk, or compliance certifications.\nExperience & Knowledge\nStrong working knowledge of the Malaysia Personal Data Protection Act 2010 (PDPA) and other applicable data protection and privacy requirements.\nRelevant experience in data privacy, compliance, risk management, legal, information security, governance, or a related field.\nExperience or knowledge in conducting Data Protection Impact Assessments (DPIAs), managing data breaches, performing privacy compliance reviews, and assessing third-party privacy risks.\nPractical understanding of privacy governance frameworks, data lifecycle management, and privacy-by-design principles.\nExperience working in a shared services, global business services, multinational, or regulated environment is an advantage.\nCompetencies\nAbility to maintain sufficient independence, authority, and autonomy to effectively discharge the responsibilities of the DPO role.\nDirect access to Sudong senior management to provide independent advice and escalate privacy matters where necessary.\nAbility to independently identify, assess, raise, and escalate privacy risks, compliance concerns, and recommendations.\nStrong stakeholder management, influencing, and communication skills, with the ability to engage effectively across all levels of the organisation.\nAbility to work collaboratively across Human Resources, Information Technology, Operations, Procurement, Security, Risk, Legal, and other GBS functions.\nProficiency in both Bahasa Malaysia and English, with strong verbal and written communication skills.\nAbility to balance regulatory compliance requirements with business objectives while maintaining an independent oversight role.\nRegulatory & Independence Requirements\nMeet all applicable Malaysian regulatory requirements relating to residency, accessibility, and contactability for an appointed DPO.\nAvoid holding responsibilities or decision-making authority that could create an actual, potential, or perceived conflict of interest with the independent oversight responsibilities of the DPO.\nBe empowered to provide objective advice, challenge practices where necessary, and report privacy risks directly to senior management without undue influence.\n Your Career Growth Starts Here. Apply Now!","description_format":"text","description_chars":7752,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mobile Networks","Broadband"],"lifecycle":[{"event":"open","at":"2026-10-20T12:27:58Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":19,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/singtel-data-protection-officer","json_url":"https://alion.io/job/singtel-data-protection-officer.json","meta":{"generated_at":"2026-10-23T10:14:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49912},"rest":"https://alion.io/mcp/rest/get_company?id=49912"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsingtel-data-protection-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsingtel-data-protection-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsingtel-data-protection-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/singtel-data-protection-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsingtel-data-protection-officer"}]}