Head of Data Privacy & Compliance

Location: Hanoi
Reports to: Standing Deputy CEO / CEO
Job overview
The Head of Data Privacy & Compliance / Director of Data Privacy & Compliance will lead the organization's data protection, privacy, and compliance function, acting as a strategic partner to senior leadership in ensuring regulatory compliance while enabling sustainable business growth.
This role requires deep, hands-on expertise in GDPR implementation, a strong legal or compliance foundation, and the ability to advise on corporate compliance standards such as SOX. The role works closely with Legal, IT Security, Risk, Audit, and Business Units to embed privacy-by-design and compliance-by-default across the organization.
Data Privacy & Compliance Strategy Leadership
• Lead and oversee all data privacy, GDPR, and compliance initiatives across the organization.
• Act as a strategic advisor to executive leadership on data protection, privacy risks, and regulatory compliance.
• Establish and continuously improve privacy and compliance frameworks aligned with business strategy and regulatory requirements.
• Build, structure, and develop
GDPR Implementation & Privacy Governance
• Develop, implement, and maintain privacy policies, procedures, standards, and documentation.
• Oversee Data Protection Impact Assessments (DPIAs), privacy risk assessments, and records of processing activities (RoPA).
• Ensure privacy-by-design and privacy-by-default principles are embedded into products, systems, and business processes.
Corporate Compliance & SOX Advisory
• Provide advisory and support to internal stakeholders on SOX compliance and related internal control frameworks, where applicable.
• Partner with Finance, Risk, Audit, and Legal teams to ensure alignment with corporate governance and compliance standards.
• Support internal and external audits related to data protection, privacy, and compliance.
Incident Management & Regulatory Engagement
• Lead the response to data privacy incidents, investigations, breach assessments, and regulatory reporting obligations.
• Serve as a key point of contact with external auditors, consultants, and regulatory authorities.
• Monitor regulatory changes, compliance trends, and industry best practices, proactively advising leadership on impacts and actions.
Training, Awareness & Compliance Culture
• Design and deliver internal training and awareness programs on data privacy, GDPR, and compliance requirements.
• Build a strong, organization-wide culture of data protection and regulatory compliance.