Hồ Chí Minh
Full-time
What you will do
- Develop, review, and maintain privacy policies and procedures to ensure compliance with laws, regulations, and industry standards (e.g., GDPR, Data Act).
- Embed privacy considerations into product strategies and business operations, reviewing contracts and agreements (e.g., DPAs, NDAs) to ensure privacy controls are robust.
- Proactively identify privacy risks, monitor self-assessments, and recommend improvements to the privacy roadmap aligned with evolving business needs.
- Partner with cross-functional teams to address privacy gaps, translate risks into actionable projects, and lead initiatives for senior leadership, including the CTO.
- Present data-driven arguments to support privacy strategies, manage feedback effectively, and align decisions with privacy impact assessments (PIA) and business impact assessments (BIA).
What you will need
- Minimum 3 years of experience in privacy/information security/GRC role.
- In-house experience and background in cybersecurity & compliance issues.
- Strong project management and cross-functional team management skills.
- Experience leading a project or agreement from conception to completion.
- Subject-matter expertise in data privacy laws, rules, regulations, and industry standards.
- Stay up to date with the latest regulatory changes and emerging privacy threats.
Nice to have: - Working knowledge of GDPR, CCPA, ISO, PCI DSS as well as international privacy, information security and data protection laws.
- Privacy/Information Security certifications.
- Experience in policy development, risk management frameworks, and privacy governance.
- Experience in handling audits and third-party assessments.