Senior Data Privacy and Compliance Officer

5-10 Years

Posted a day ago
Be among the first 10 applicants

Job Description

Location: Nguyen Van Linh street, District 7, Ho Chi Minh City

Working Hour: Mon – Fri | 8.30 AM – 5.30 PM

Get To Know The Team

The Privacy Office and Compliance Team is responsible for overseeing the organization's personal data governance, privacy, and compliance programmes across the organization.

We are looking for a self-motivated, highly energized Data Privacy and Compliance Officer to join our team to lead and oversee data privacy, data protection, and compliance processes and initiatives, ensuring that the organization meets its obligations under Vietnam's privacy laws and regulatory requirements. The team partners closely with stakeholders across the business to embed privacy and compliance into our products, operations, and decision-making.

Get To Know The Role

In this role, you will have the opportunity to work on privacy, and compliance matters across business verticals. You will partner with key stakeholders in our product, engineering, business, marketing, compliance, and legal teams to design practical privacy solutions that enable business to meet both global and local privacy obligations while supporting business growth.

You will advise on privacy compliance requirements, support the implementation and monitoring of governance frameworks, and help drive compliance with evolving regulatory expectations in Vietnam.

You will also provide privacy and data security subject matter expertise to our legal counsels as they negotiate complex commercial arrangements that contribute to our products success. As the company continues to expand its offerings across Southeast Asia, your ideas and contributions will have an immediate impact.

In Addition, You Will Support The Vietnam Data Privacy And Senior Compliance Officer In Developing And Implementing Data Privacy And Compliance Strategies, Strengthening Governance Frameworks, Monitoring Regulatory Developments, Managing Compliance Programmes, And Ensuring Continued Compliance With Existing And Emerging Data Protection Laws And Regulations, Including

Law on Personal Data Protection 2025 (Law No. 91/2025/QH15)
Decree No. 356/2025/ND-CP
Cybersecurity law No. 116/2025/QH15
Decree No. 53/2022/ND-CP (Cybersecurity Law Implementation)
Law on Artificial Intelligence

The Day-to-day Activities

Conduct privacy impact and vendor risk assessments, recommend practical remediation and provide risk-based advice to leadership.
Review agreements for the transfer and processing of personal data among various entities.
Ensure compliance with the company's policies, laws, and regulations relating to privacy.
Develop and maintain internal practices to support the company's privacy initiatives.
Provide ongoing management, content development and oversight of the privacy training program.
Provide project support to the Legal team on privacy and data protection issues.
Build, refine, and scale the privacy and data protection compliance framework.
Identify opportunities to improve and automate privacy processes, frameworks, and controls.
Lead and support responses to regulatory investigations and data subject requests.
Lead and support investigations into privacy incidents.
Perform privacy reviews and advise business and product development teams to embed Privacy by Design into new products, AI-enabled features and emerging technologies.
Collaborate with the Public Affairs team to monitor privacy and data-protection related developments and coordinate communications with regulators as necessary
Collaborate regularly with leadership to provide strategic guidance on emerging privacy requirements.
File Dossiers to comply with the applicable regulations.
Query, analyze, and extract data using tools like SQL and Python to generate reports for regulatory submissions, compliance reporting, and data subject requests.
Support country Compliance to prepare routine and ad-hoc regulatory reports; contact points in communication channel with regulator to timely respond to regulatory requests.

The Must Haves

Proficient in both written and oral English & Vietnamese
5-10 years experience in Data Privacy, Compliance, Information Security, or Legal roles.
Experience in complaint and breach handling and remediation.
Experience in rolling out and running a data privacy programme.
Ability to prioritize and manage multiple projects and work in a fast-paced environment.
Organized, responsive, and able to gain support and consensus with multiple stakeholders.
Degree in law or equivalent
Experience in, and a strong passion for technology, AI, big data, data governance and data privacy
Good knowledge of current and upcoming data privacy and cybersecurity laws in Vietnam.
A collaborative self-starter who can work independently, and be comfortable in a high-growth, fast-paced and dynamic environment
Team player with a proven track record of building cross-functional relationships.
Demonstrated ability to complete several simultaneous projects on a deadline.
CIPP or CIPM other Privacy certifications a plus.
Good understanding of the laws required for this role.
Working knowledge of programming/querying tools (e.g., SQL, Python, etc) with the ability to write queries and scripts for data extraction, analysis, and generating reports for regulatory submissions.