Data Protection Expert

1. Personal Data protection framework and management
2. Provide expert advice and educate employees on personal data compliance requirements.
3. Research and implement International security standards and other entity requirements (SBV, MOPS …) into company systems.
4. Research and development, implement standards and policies to comply with Vietnam PDPD 13/ PDPL.
5. Draft new and amend existing internal personal data protection policies, guidelines, and procedures, in consultation with key stakeholders.
6. Co-ordinate with other IT teams to develop technical policies, standards, procedures align with LOTTE FINANCE IT security requirements.
7. Deliver training across all business units to staff members who are involved in data handling or processing.
8. Conduct audits to ensure compliance and to address potential issues.
9. Make the rule for maintain records of all data processing activities of the company.
10. Serve as point of contact for personal data protection authorities.
11. Review and evaluate cooperation contracts with partners that are involved in data sharing activities.
12. Collect, analyse, build-up report related to personal data protection for IT Security.
13. Do other jobs assigned by Manager/Director.

1. Bachelor or higher degree in Law, Information Technology (HUT, ACT, VNU are preferred).  
2. 3 years or more of working experience in banking, good knowledge in international IT security standards (GDPR, …), ITIL best practices.  
3. Expertise in data protection laws and practices, including deep understanding of Vietnamese PDPL/ PDPD-13/GDPR.  
4. Experience in a legal, audit, or risk management role.  
5. Have good knowledge in network security, system security, application security and virus/malwares.  
6. Have good knowledge in security architect, security technology, integration is preferred.  
7. Excellent verbal and written communication skills, with strong attention to detail.  
8. Ability to work effectively under pressure and to manage sensitive and confidential information.