Data Protection Manager / Privacy Manager (9-month contract), OLGA

COMPANY DESCRIPTION

Singapore Management University is a place where high-level professionalism blends together with a healthy informality. The 'family-like' atmosphere among the SMU community fosters a culture where employees work, plan, organise and play together - building a strong collegiality and morale within the university.

Our commitment to attract and retain talent is ongoing. We offer attractive benefits and welfare, competitive compensation packages, and generous professional development opportunities - all to meet the work-life needs of our staff. No wonder, then, that SMU continues to be given numerous awards and recognition for its human resource excellence.

RESPONSIBILITIES

• This position is for Office of Legal and General Affairs (OLGA).

• Multi-jurisdiction privacy compliance

• Accountable for ensuring the University's data protection and privacy practices remain compliant across Singapore, China, Indonesia, Thailand, and Vietnam — including monitoring the regional regulatory environment, assessing the impact of legal changes on University programmes, services, systems, and research, and translating new requirements into practical compliance action, with particular attention to higher-risk markets.

• Privacy assessments, agreements, and documentation

• Accountable for conducting Data Protection Impact Assessments and reviewing and negotiating data privacy clauses, Data Processing Agreements, collection statements, and consent language with vendors, partners, and third parties; and for developing and maintaining current privacy policies, notices, templates, and records of processing (including localisation across jurisdictions).

• Stakeholder advisory and programme support

• Accountable for advising faculties, professional units, and other stakeholders on the legality and operational feasibility of products, systems, and programmes; handling information requests from authorities and third parties lawfully and proportionately; embedding privacy-by-design into new systems and services; and delivering privacy awareness and training across the University.

• Governance and regulator engagement

• Accountable for supporting the DPOs in maintaining the data protection management programme (data inventory mapping, risk assessments, gap analysis, controls), in acting as a contact point for data protection authorities, and in breach and incident handling — including investigation support, documentation, and remediation tracking.

• Other duties as assigned.

QUALIFICATIONS

• Essential

• Degree or Diploma holder, with a strong grounding in data protection and privacy.