Data Privacy and Compliance Officer

Role Overview :

The Privacy Office and Compliance Team is responsible for overseeing personal data governance, privacy, and compliance programmes across the organisation. We are seeking a self-motivated, highly energised Data Privacy and Compliance Officer to lead and oversee data privacy, data protection, and compliance processes and initiatives, ensuring adherence to Vietnam’s privacy laws and regulatory requirements. The team works closely with cross-functional stakeholders to embed privacy and compliance into products, operations, and decision-making processes across the business.

Get to know the Role:

• In this role, you will have the opportunity to work on privacy and compliance matters across multiple business verticals. You will partner with key stakeholders in product, engineering, business, marketing, compliance, and legal teams to design practical privacy solutions that enable the organisation to meet both global and local privacy obligations while supporting business growth. You will advise on privacy compliance requirements, support the implementation and monitoring of governance frameworks, and help drive compliance with evolving regulatory expectations in Vietnam.
• You will also provide privacy and data security subject matter expertise to legal counsels as they negotiate complex commercial arrangements that contribute to product success. As the organisation continues to expand its offerings across Southeast Asia, your ideas and contributions will have an immediate impact.
• In addition, you will support the Vietnam Data Privacy and Senior Compliance Officer in developing and implementing data privacy and compliance strategies, strengthening governance frameworks, monitoring regulatory developments, managing compliance programmes, and ensuring continued compliance with existing and emerging data protection laws and regulations, including:
• Law on Personal Data Protection 2025 (Law No. 91|2025|QH15)
• Decree No. 356|2025|ND-CP
• Cybersecurity law No. 116|2025|QH15
• Decree No. 53|2022|ND-CP (Cybersecurity Law Implementation)
• Law on Artificial Intelligence

The day-to-day activities:

• Conduct privacy impact assessments and vendor risk assessments, recommend practical remediation measures, and provide risk-based advice to leadership.
• Review agreements related to the transfer and processing of personal data across various entities.
• Ensure compliance with internal policies, applicable laws, and regulations relating to privacy.
• Develop and maintain internal practices to support privacy initiatives across the organisation.
• Manage, develop content for, and oversee the privacy training programme.
• Provide project support to the Legal team on privacy and data protection matters.
• Build, refine, and scale the privacy and data protection compliance framework.
• Identify opportunities to improve and automate privacy processes, frameworks, and controls.
• Lead and support responses to regulatory investigations and data subject requests.
• Lead and support investigations related to privacy incidents.
• Conduct privacy reviews and advise business and product development teams to embed Privacy by Design into new products, AI-enabled features, and emerging technologies.
• Collaborate with the Public Affairs team to monitor privacy and data protection developments and coordinate communications with regulators where required.
• Partner with leadership to provide strategic guidance on emerging privacy requirements.
• Prepare and file dossiers to ensure compliance with applicable regulations.
• Query, analyse, and extract data using tools such as SQL and Python to generate reports for regulatory submissions, compliance reporting, and data subject requests.
• Support country compliance in preparing routine and ad-hoc regulatory reports; act as a point of contact in communication channels with regulators to ensure timely responses to regulatory requests.

The must haves:

• Proficient in both written and oral English & Vietnamese
• 5-10 years experience in Data Privacy, Compliance, Information Security, or Legal roles.
• Experience in complaint and breach handling and remediation.
• Experience in rolling out and running a data privacy programme.
• Ability to prioritize and manage multiple projects and work in a fast-paced environment.
• Organized, responsive, and able to gain support and consensus with multiple stakeholders.
• Degree in law or equivalent
• Experience in, and a strong passion for technology, AI, big data, data governance and data privacy
• Good knowledge of current and upcoming data privacy and cybersecurity laws in Vietnam.
• A collaborative self-starter who can work independently, and be comfortable in a high-growth, fast-paced and dynamic environment
• Team player with a proven track record of building cross-functional relationships.
• Demonstrated ability to complete several simultaneous projects on a deadline.
• CIPP or CIPM other Privacy certifications a plus.
• Good understanding of the laws required for this role.
• Working knowledge of programming/querying tools (e.g., SQL, Python, etc) with the ability to write queries and scripts for data extraction, analysis, and generating reports for regulatory submissions.

Benefits:

• 100% salary during probation period
• Full-salary social insurance contribution from the first month
• 24/7 accident insurance coverage
• Training and professional skill development opportunities
• Stable working environment with clear processes

Working Hours:

• Monday to Friday: 9:00 AM – 6:00 PM