About this Role
In a technology-driven lending business, strong data governance, privacy protection, and regulatory compliance are critical to sustainable growth. This role leads to the design and evolution of the company’s data protection and compliance frameworks, ensuring regulatory requirements are embedded into products, systems, and operations from the ground up.
You will work at the intersection of regulation, data, and technology — enabling innovation while managing regulatory and data risks.
What will you do
Data Protection & Privacy Leadership
- Lead the company’s data protection program, ensuring alignment with applicable privacy regulations
- Oversee data mapping, data inventory, and data lifecycle governance
- Conduct and review Data Protection Impact Assessments (DPIAs) for new products, features, and data use cases
- Manage data subject rights processes (access, correction, deletion, etc.)
- Lead personal data breach response, investigation, and regulatory notification processes
- Embed privacy-by-design principles into product development and system architecture
Regulatory Compliance & Risk Frameworks
- Design, implement, and continuously improve enterprise compliance frameworks, policies, and internal controls
- Interpret regulatory requirements and translate them into operational and system-level controls
- Ensure business activities align with regulatory expectations for a technology-driven lending environment
- Support risk assessments and ensure compliance risks are identified, measured, and mitigated
- Maintain inspection-ready compliance documentation and evidence
Technology, Data Governance & Control Integration
- Work closely with product, engineering, and data teams to embed compliance and control requirements into systems and data flows
- Align data governance practices with regulatory and risk requirements
- Ensure system controls, access controls, and data handling practices meet compliance standards
- Drive scalable, technology-enabled approaches to compliance and governance
Regulator Engagement & Compliance Reporting
- Act as a key interface with regulators and authorities on compliance and data protection matters
- Support regulatory inquiries, examinations, and supervisory discussions
- Ensure timely, accurate, and well-governed regulatory and compliance reporting
- Improve reporting efficiency through automation and structured data
Cross-Functional Advisory & Team Leadership
- Provide strategic compliance and data protection advice to senior management and business leaders
- Partner with stakeholders across product, engineering, risk, and operations to enable compliant innovation
- Lead, mentor, and develop compliance and data protection team members
- Promote a strong compliance, privacy, and risk-aware culture across the organization
Who we are looking for
- 7+ years of experience in compliance, data protection, risk, or regulatory roles, preferably in fintech, lending, financial services, or technology-driven environments
- Proven experience leading enterprise-level data protection and compliance programs
- Strong understanding of data lifecycle management, data governance, and technology-related controls
- Ability to translate regulatory and privacy requirements into technical and operational solutions
- Analytical and structured mindset, comfortable working with data, tools, and metrics
- Hands-on and execution-oriented, able to operate at both strategic and operational levels
- Strong stakeholder management and influencing skills
- Knowledge of PDPA, GDPR, AML/CFT, non-bank regulations, or similar regulatory frameworks is strongly preferred