Job Description
DATA PROTECTION OFFICER
JOB ROLE
- Develop, implement and maintain the organization’s Data Protection Framework, policies, standards and Records of Processing Activities (ROPA).
- Monitor and assess compliance with PDPA requirements across all business units.
- Conduct Data Protection Impact Assessments (DPIA), Privacy Impact Assessments (PIA), Legitimate Interest Assessments (LIA) and Transfer Impact Assessments (TIA).
- Lead personal data breach assessments, incident investigations and response activities.
- Advise management and employees on privacy obligations, emerging regulations and best practices.
- Deliver privacy awareness programmes and executive briefings to strengthen organizational awareness.
- Review vendor privacy controls, data processing agreements and cross border data transfer arrangements.
- Collaborate with regulators, auditors and internal stakeholders on privacy and compliance matters.
- Promote Privacy by Design principles across projects, systems and digital transformation initiatives.
REQUIREMENTS
- Bachelor's degree in Information Security, Computer Science, IT, Cyber Security, Law, Business Information Systems or a related discipline.
- A Master’s degree in Cyber Security, Information Security, Law, Privacy, Business Administration or a related field will be an added advantage.
- Minimum 8 years of experience in Data Protection, IT Governance, Compliance, Risk Management, Information Security or Legal Compliance.
- Proven experience in implementing privacy programs, conducting privacy risk assessments (DPIA, LIA, TIA), policy development and managing regulatory audits.
- Strong technical knowledge of the Sri Lanka Personal Data Protection Act (PDPA), GDPR principles, Privacy by Design/Default and cross border data transfer mechanisms.
- Hands on experience with ISO/IEC 27001, ISO/IEC 27701, NIST Privacy Framework, Identity & Access Management, Cloud Security and Incident Response.
- Prior experience in the telecommunications industry handling large-scale customer data, SIM registration requirements, CDRs and digital payment ecosystems will be an added advantage.
Interested candidates may forward the CVs to [email protected]
