Head of Data Privacy & Compliance

Job overview
- The Head of Data Privacy & Compliance / Director of Data Privacy & Compliance will lead the organization's data protection, privacy, and compliance function, acting as a strategic partner to senior leadership in ensuring regulatory compliance while enabling sustainable business growth.
- This role requires deep, hands-on expertise in GDPR implementation, a strong legal or compliance foundation, and the ability to advise on corporate compliance standards such as SOX.
The role works closely with Legal, IT Security, Risk, Audit, and Business Units to embed privacy-by-design and compliance-by-default across the organization.
Reports to: Standing Deputy CEO / CEO
Key Responsibilities:
1. Data Privacy & Compliance Strategy Leadership
• Lead and oversee all data privacy, GDPR, and compliance initiatives across the organization.
• Act as a strategic advisor to executive leadership on data protection, privacy risks, and regulatory compliance.
• Establish and continuously improve privacy and compliance frameworks aligned with business strategy and regulatory requirements.
• Build, structure, and develop the Data Privacy & Compliance function, including policies, processes, and capabilities.
2. GDPR Implementation & Privacy Governance
• Lead and manage GDPR implementation projects, including gap assessments, remediation plans, and ongoing compliance monitoring.
• Develop, implement, and maintain privacy policies, procedures, standards, and documentation.
• Oversee Data Protection Impact Assessments (DPIAs), privacy risk assessments, and records of processing activities (RoPA).
• Ensure privacy-by-design and privacy-by-default principles are embedded into products, systems, and business processes.
3. Corporate Compliance & SOX Advisory
• Provide advisory and support to internal stakeholders on SOX compliance and related internal control frameworks, where applicable.
• Partner with Finance, Risk, Audit, and Legal teams to ensure alignment with corporate governance and compliance standards.
• Support internal and external audits related to data protection, privacy, and compliance.
4. Cross-Functional & Business Support
• Work closely with Legal, IT Security, Risk, Audit, and Business Units to ensure regulatory alignment.
• Advise business and product teams on data usage, personal data processing, cross-border data transfers, and third-party/vendor compliance.
• Support contract reviews and negotiations from a data privacy and compliance perspective.
5. Incident Management & Regulatory Engagement
• Lead the response to data privacy incidents, investigations, breach assessments, and regulatory reporting obligations.
• Serve as a key point of contact with external auditors, consultants, and regulatory authorities.
• Monitor regulatory changes, compliance trends, and industry best practices, proactively advising leadership on impacts and actions.
6. Training, Awareness & Compliance Culture
• Design and deliver internal training and awareness programs on data privacy, GDPR, and
compliance requirements.
• Build a strong, organization-wide culture of data protection and regulatory compliance.
Work Location: Hanoi: TechnoPark Tower, Vinhomes Ocean Park, Hanoi