Manager - Compliance (Data Governance and Privacy)

If you are looking to excel and make a difference, take a closer look at us…

Job Overview

The Manager, Data Governance and Privacy serve as a Subject Matter Expert (SME) in personal data protection laws and banking regulatory frameworks related to customer data. Reporting to the Senior Manager, Data Governance and Privacy, the Manager is responsible for driving the Bank’s compliance with the Personal Data Protection Act 2010 (PDPA), Financial Services Act 2013 (FSA), Islamic Financial Services Act 2013 (IFSA) and Bank Negara Malaysia (BNM) standards including Management of Customer Information and Permitted Disclosure (MCIPD).

This role requires a proactive compliance leader capable of providing expert advisory support across business and support units, executing in-depth privacy gap assessments, performing holistic data breach evaluations including containment strategies, managing regulatory notifications and maintaining professional relations with both internal and external stakeholders.

Job Responsibilities

Advisory Support

• PDPA Advisory Support: Provide authoritative, day-to-day regulatory advisory support to business units on all aspects of the Personal Data Protection Act 2010 (PDPA), including data processing principles, lawful basis for processing, cross-border transfers, data subject rights, consent mechanisms, and privacy notices.
• MCIPD Advisory Support: Act as the primary advisor on BNM’s Management of Customer Information and Permitted Disclosures (MCIPD) policy document, guiding business operations on customer confidentiality obligations, statutory secrecy requirements under FSA/IFSA, conditions for permitted disclosures, and customer information handling.
• Provide advisory guidance during the conceptualization, design, and launch of new banking products, digital initiatives, marketing campaigns, and technology solutions to embed Privacy-by-Design and MCIPD compliance.

Risk Management & Assessment

• Lead and execute comprehensive, end-to-end privacy gap assessments and Data Privacy Impact Assessments (DPIAs) for operational processes, and systems.
• Manage risks related to cross-jurisdictional data transfers, including Transfer Impact Assessments (for Advanced Tier).
• Assess risks associated with emerging technologies like Artificial Intelligence (AI) and Machine Learning (ML).

Governance & Incident Management

• Develop, review, and continuously update policies, privacy notices, and standard operating procedures (SOPs).
• Lead the incident management response workflow, serving as a primary compliance contact for responding to data breaches and customer data exposure incidents.
• Conduct holistic assessments of data incidents/breaches, analyzing root causes, extent of affected customer information under FSA/IFSA/MCIPD and PDPA, operational impact, financial exposure, legal liability, and reputational risk.
• Comprehensive incident assessment reports, review senior management and board update, and mandatory breach notification filings to external regulators (e.g., PDPC, Bank Negara Malaysia) within stipulated regulatory timelines.

Stakeholder Engagement

• Engage and manage relationships professionally with internal stakeholders (Business Units and Support Units) to integrate privacy-by-design and MCIPD compliance controls into business operations.
• Design and deliver targeted training sessions and awareness campaigns to embed a culture of privacy and customer data protection across the bank.

Others

Such additional responsibilities that the PDPC or the Bank may include from time to time (e.g. as a result of technological developments).

Job Requirements

• Bachelor’s Degree (Professional certification in privacy is a plus).
• 5 years of experience in data governance, data privacy, or regulatory compliance within banking or financial institutions
• In-depth subject matter expertise (SME) in key Malaysian financial and privacy laws/guidelines:
• Personal Data Protection Act 2010 (PDPA) and PDPC guidelines/codes of practice.
• BNM Policy Document on Management of Customer Information and Permitted Disclosures (MCIPD).
• Financial Services Act 2013 (FSA) and Islamic Financial Services Act 2013 (IFSA) customer secrecy provisions.
• BNM Risk Management in Technology (RMiT) requirements related to data protection.

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Realise your full potential at Hong Leong Bank by applying now.