About This Role

In a technology-driven lending business, strong data governance, privacy protection, and regulatory compliance are critical to sustainable growth. This role leads to the design and evolution of the company's data protection and compliance frameworks, ensuring regulatory requirements are embedded into products, systems, and operations from the ground up.

You will work at the intersection of regulation, data, and technology — enabling innovation while managing regulatory and data risks.

What Will You Do

Data Protection & Privacy Leadership

Lead the company's data protection program, ensuring alignment with applicable privacy regulations
Oversee data mapping, data inventory, and data lifecycle governance
Conduct and review Data Protection Impact Assessments (DPIAs) for new products, features, and data use cases
Manage data subject rights processes (access, correction, deletion, etc.)
Lead personal data breach response, investigation, and regulatory notification processes
Embed privacy-by-design principles into product development and system architecture

Regulatory Compliance & Risk Frameworks

Design, implement, and continuously improve enterprise compliance frameworks, policies, and internal controls
Interpret regulatory requirements and translate them into operational and system-level controls
Ensure business activities align with regulatory expectations for a technology-driven lending environment
Support risk assessments and ensure compliance risks are identified, measured, and mitigated
Maintain inspection-ready compliance documentation and evidence

Technology, Data Governance & Control Integration

Work closely with product, engineering, and data teams to embed compliance and control requirements into systems and data flows
Align data governance practices with regulatory and risk requirements
Ensure system controls, access controls, and data handling practices meet compliance standards
Drive scalable, technology-enabled approaches to compliance and governance

Regulator Engagement & Compliance Reporting

Act as a key interface with regulators and authorities on compliance and data protection matters
Support regulatory inquiries, examinations, and supervisory discussions
Ensure timely, accurate, and well-governed regulatory and compliance reporting
Improve reporting efficiency through automation and structured data

Cross-Functional Advisory & Team Leadership

Provide strategic compliance and data protection advice to senior management and business leaders
Partner with stakeholders across product, engineering, risk, and operations to enable compliant innovation
Lead, mentor, and develop compliance and data protection team members
Promote a strong compliance, privacy, and risk-aware culture across the organization

Who We Are Looking For

7+ years of experience in compliance, data protection, risk, or regulatory roles, preferably in fintech, lending, financial services, or technology-driven environments
Proven experience leading enterprise-level data protection and compliance programs
Strong understanding of data lifecycle management, data governance, and technology-related controls
Ability to translate regulatory and privacy requirements into technical and operational solutions
Analytical and structured mindset, comfortable working with data, tools, and metrics
Hands-on and execution-oriented, able to operate at both strategic and operational levels
Strong stakeholder management and influencing skills
Knowledge of PDPA, GDPR, AML/CFT, non-bank regulations, or similar regulatory frameworks is strongly preferred

DPO & Senior Compliance Specialist