If you are looking to excel and make a difference, take a closer look at us…
Job Overview
The Manager, Data Governance and Privacy serves as a Subject Matter Expert driving compliance with the Personal Data Protection Act 2010 (PDPA), Financial Services Act 2013 (FSA), Islamic Financial Services Act 2013 (IFSA), and Bank Negara Malaysia (BNM) standards, including MCIPD. The role delivers expert advisory support across business units, conducts privacy assessments, manages data incident notifications, and oversees stakeholder relations; the role will be reporting to Senior Manager, Data Governance and Privacy
Job Responsibilities
- Advisory Support: Provide day-to-day authoritative regulatory guidance on the Personal Data Protection Act 2010 (PDPA) and act as the primary advisor on BNM’s Management of Customer Information and Permitted Disclosures (MCIPD) and customer secrecy requirements under FSA/IFSA, embedding Privacy-by-Design into new banking products, digital initiatives, and marketing campaigns.
- Risk Management & Assessment: Lead and execute comprehensive end-to-end privacy gap assessments, Data Privacy Impact Assessments (DPIAs), Transfer Impact Assessments for cross-jurisdictional data flows, and risk evaluations for emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML).
- Governance & Incident Management: Develop and maintain policies, privacy notices, and SOPs, while leading the incident response workflow by conducting holistic impact assessments of customer data breaches and preparing regulatory notifications (e.g., to PDPC, BNM) within mandated timelines.
- Stakeholder Engagement: Collaborate with internal business and support units to integrate privacy and MCIPD controls into operational processes, and design and deliver targeted training and awareness campaigns across the organization.
- Advisory & Writing Excellence: Translate complex statutory and regulatory frameworks (PDPA, MCIPD, FSA, IFSA) into clear, pragmatic advisory briefs, formal governance policies, executive updates, and statutory breach reports.
- Communications, Leadership & Integrity: Exercise high ethical standards and independent judgment when managing regulatory compliance initiatives, while maintaining professional and diplomatic interactions with executive leaders, external regulators, and auditors.
Job Requirements
- Bachelor’s Degree (Professional certification in privacy is a plus).
- 5 years of experience in data governance, data privacy, or regulatory compliance within banking or financial institutions
- Demonstrate deep SME knowledge of the PDPA 2010 and FSA/IFSA customer secrecy provisions
- Possess strong practical knowledge of BNM's MCIPD and RMiT data protection standards.
- Demonstrate excellent spoken and written proficiency in English and Bahasa Malaysia.
About Hong Leong Bank
We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.
We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.
Realise your full potential at Hong Leong Bank by applying now.
