Manager - Global Data Privacy

About the role

Axiata Group is looking for an experienced Manager - Global Data Privacy to lead and oversee data privacy compliance and governance across Malaysia, Sri Lanka and Indonesia. The role ensures adherence to regional data protection laws, maintains ISO 27001 and ISO 27701 standards, runs Privacy Impact Assessments and embeds Privacy by Design across business operations and technology platforms. It requires strong expertise in data privacy, regulatory compliance, risk management and privacy governance, plus proven project management, stakeholder engagement and training capabilities.

Key responsibilities

• Ensure compliance with the Malaysian PDPA, the Sri Lankan PDPA and Indonesia's Law No. 27 of 2022, track regulatory changes and update policies accordingly
• Maintain and improve the ISMS and PIMS in line with ISO 27001 and ISO 27701
• Run Privacy by Design assessments and DPIAs, identify privacy risks and recommend mitigations
• Work with product, engineering and business teams to embed privacy controls early
• Manage multiple concurrent privacy projects, develop and enforce group-wide privacy policies, support ISO 27001 and ISO 27701 audits, and handle data subject requests, incidents and breaches
• Design and deliver privacy awareness programmes for staff across the three countries and build a culture of privacy awareness
• Liaise with offshore and local teams, Axiata Group, regulators and business units, and report compliance status, risks and incidents to senior management

Required profile

• Strong analytical and risk-assessment mindset
• Excellent project management and organizational skills
• Cross-cultural communication and regional sensitivity across Malaysia, Sri Lanka and Indonesia
• Proven ability to manage several projects at once across different markets and time zones
• Ability to turn legal and regulatory requirements into practical, business-friendly processes
• Attention to detail and integrity with confidential information
• Excellent communication and stakeholder management, able to train diverse audiences