Overview:
We're seeking a Data Governance Analyst to drive the adoption of enterprise-wide data governance standards and tools, ensuring compliance with Bank of Thailand (BOT) data governance policies and Thailand PDPA (Personal Data Protection Act.). This role is a key to putting our data governance framework into practice, serving as a Subject Matter Expert in PDPA to review contracts, mitigate risks, and support regional countries regarding data protection law
What You'll Do:
As a key member of the Data Governance team, you will lead and guide critical data governance initiatives and tasks covering data risk management and legal or 3rd party compliance with PDPA.
Key Responsibilities:
- Privacy Compliance Management: Review 3rd party contracts, terms & conditions (T&C), and consent mechanisms to address PDPA concerns and BOT regulation full compliance.
- Regional Support: Ensure regional country data privacy policy aligned with Headquarter policy and comply with data protection law ROPA Management: Lead and cooperation with stakeholders of the creation and maintenance of Records of Processing Activities (ROPAs) to ensure PDPA compliance.
- Data Risk Management: Collaborate with Process Owners and Data Risk Owners to identify, assess, and mitigate data risks, including those related to operations, ITsecurity, and data quality in order to conduct the DPIA
- ROPA & Data Risk Tool: Lead the implementation and development of tools for ROPA and data risk management.
- Manage and Coordinate to ensure the effective operation of the Privacy team's workflow by coordinating incoming requests, monitoring work progress, maintaining operational records, and providing accurate reporting and dashboards to support management decision-making.
Core Activities:
- Analyze ROPAs, data processing requirements, and existing controls to pinpoint policy gaps.
- Review 3rd party contracts, T&Cs contents, and consent contents & flows for PDPA compliance
- Conduct DPIA to ensure PDPA risk mitigation.
- Provide expert guidance and support to regional teams in order to align PDPA or related data protection law implementation.
- Identify and evaluate the potential risks and impacts of data processing activities.
- Provide expert guidance to stakeholders on risk assessment, mitigation strategies, and issue resolution.
What We're Looking For:
-Experience and Skills:
- Data Governance Expertise: Proven experience in a data governance, data protection, or data privacy role. An understanding of core data governance principles and best practices is preferable.
(One or more of the following experiences are preferable; IT audit, project risk management, IT risk management, IT security risk management, and project management)
- Regulatory Knowledge: Knowledge of data protection regulations, specifically the PDPA (Personal Data Protection Act) and its application in a business environment.
- Risk Management: Hands-on DPIA experience in identifying, assessing, and mitigating various types of data-related risks, including operational, IT, security, and data quality risks.
- Project Leadership: Experience leading or managing projects, particularly those involving cross-functional teams and senior stakeholders. This role requires someone who can drive initiatives from start to finish.
- Technical Acumen: Familiarity with tools and technologies used for ROPA and data risk management. Analytical Skills: Strong analytical abilities to review complex documents (like ROPAs), identify gaps, and propose effective solutions. Ability to use a data analytics tool or Python, R, SQL programming is a significant plus.
-Qualifications:
- Education: Bachelor's or higher in Computer Science, Computer Engineering, MIS, Lawyer, or a related field.
- Experience:
- 3 - 5 years in a services organization with one or more of following preferable experiences; IT audit, project risk management, IT risk management, IT security risk management, ROPA and DPIA/PIA according to PDPA or any other data protection law
- Proven experience in IT project management, data/IT governance and compliance, IT audit, data security, or similar data management/analytics roles.
- Experience in banking or financial services is preferred.
-Knowledge:
- Strong knowledge in PDPA law.
- Knowledge of Risk management
- Understanding of BOT Data Governance Guidelines, ISO27001, PDPA, and industry best practices for Data Governance.
- Knowledge of data protection, regulatory requirements, and emerging data trends.
-Skills:
- Fluent in English, with excellent communication and presentation skills.
- Strong teamwork, collaboration, and problem-solving abilities.
- A proactive, can-do attitude.
