Manager, Data Protection Compliance

Job description

Job Description The incumbent is responsible for overseeing SingPost’s data protection framework and governance, while supporting the Head of Compliance in ensuring effective compliance oversight across the organisation. This includes preparing quarterly compliance reports for the Board, supporting the compliance e-learning project, and conducting sanctions checks. The incumbent also independently leads and delivers data privacy projects with minimal supervision, ensuring successful execution and effective engagement with relevant stakeholders. Key projects include developing the organisation-wide Data Inventory Map, including the identification and mapping of SingPost’s data flows, and revamping the Group Policy Register to ensure it remains the single source of truth for all policies and SOPs across SingPost. Compliance Management Develop, implement, and maintain compliance frameworks, policies, and procedures, including those related to data privacy. Ensure business operations comply with local and international regulations (e.g., PDPA, GDPR, Payment Services Act, Privacy Act, Prevention of Corruption Act). Propose and implement effective controls to mitigate identified compliance gaps. Monitoring & Reporting Monitor business units’ adherence to compliance standards and regulatory requirements. Participate in compliance reviews, investigations, and management reporting. Provide regular inputs to the Head of Compliance on regulatory and compliance matters. Support Head of Compliance with timely investigation and reporting of personal data breaches. Advisory & Guidance Provide internal compliance advice to business and management teams. Guide team members and colleagues on regulatory requirements and best practice to keep the organisation abreast on regulatory updates. Training & Awareness Conduct compliance awareness briefings and staff training programs. Independently plan and execute training programmes and e-learning content to all employees. Ensure employees understand and adhere to policies, procedures, and regulatory obligations. Project & Risk Participation Participate in projects with business and support units to ensure regulatory requirements are considered early. Identify and mitigate compliance risks at the project planning stage. Independently run and execute compliance projects with minimal supervision . These projects include the Data Inventory Map rollout, Group Policy Register refresh and Data Privacy Dashboard. Continuous Improvement Identify gaps in compliance processes and propose enhancements. Perform compliance testing, if and when needed. Implement controls and monitoring activities to strengthen compliance posture. Use of AI to enhance outputs Requirements Bachelor’s degree in Law, Business Administration, Risk Management, Finance, Information Technology, or a related discipline. At least 5 years of experience in regulatory compliance or data privacy within a complex matrix organization. Experience in logistics, financial services, or other regulated industries is preferred. Data Privacy Certification is ideal Strong knowledge of data privacy laws and regulations, including PDPA and GDPR. Understanding of relevant regulatory, governance, risk, and compliance frameworks. Familiarity with compliance monitoring, audit, and investigation practices. Experience with regulated industries, preferably logistics or financial services/ Strong written and verbal communication skills for reporting, advisory, and training. Strong analytical, problem-solving, and decision-making skills. Effective stakeholder management and collaboration skills. Ability to deliver compliance and data privacy training and awareness programmes. Good project management skills, with the ability to support cross-functional initiatives. Ability to independently manage and deliver compliance and data privacy projects. Ability to translate regulatory requirements into practical business solutions. Strong attention to detail and accuracy in compliance monitoring and reporting. Sound judgement, integrity, and professionalism in handling compliance matters. Ability to manage multiple priorities and adapt to changing regulatory requirements. Ability to influence and advise stakeholders on policies, controls, and compliance requirements.