
Manager, Regulatory Compliance
- Petaling Jaya, Selangor
- RM 10,000-12,000 per month
- Permanent
- Full-time
- Serve as a trusted advisor to departments on interpreting and applying the PDPA 2024
- Lead and coordinate the execution of Data Protection Impact Assessments (DPIAs)
- Review new products, services, systems, and processes for data privacy risks, providing recommendations and mitigations
- Support the Line Manager in developing, maintaining, and strengthening the Group’s compliance framework, policies, and procedures
- Conduct internal audits and assessments of data processing activities and compliance practices
- Investigate and manage suspected or actual personal data breaches, including breach notifications and recordkeeping
- Maintain compliance registers (e.g., data breaches, conflict of interest, anti-bribery & corruption declarations)
- Partner with Training & Development to design and deliver data protection, ethics, and compliance training programs
- Lead awareness campaigns to embed a strong compliance and integrity culture throughout the Company
- Track regulatory developments and assess their impact on the Group’s operations
- Conduct periodic compliance reviews and submit reports to management and regulators
- Evaluate business activities and third-party engagements for potential compliance risks
- Act as a liaison with regulators, auditors, and external stakeholders on data protection and compliance matters
- Provide guidance to internal teams on Data Subject Access Requests (DSARs) and rights under PDPA 2024
- Collaborate cross-functionally to support compliance in business processes, contracts, and third-party relationships
- Handle ad hoc tasks and projects as assigned by Line Manager or/and Management
- Lead or support compliance initiatives and projects beyond data protection, such as corporate governance reviews and regulatory filings
- Must possess at least a Bachelor's degree in Law, Business Administration, Risk Management, Finance, or a related field
- Professional certifications in Data Protection, Compliance, Risk, or ISO standards (e.g., CIPM, CIPT, CRM, FRM, CAMS, GRCP, ISO/IEC 27001 Lead Implementer or Auditor, ISO 37001 Anti-Bribery) are highly advantageous
- Minimum of eight (8) years of experience in risk management, compliance, internal audit, ISO, or a legal role, preferably within a retail environment with multi branch operations
- Strong knowledge of Malaysian laws and regulations: company law, contract law, MACC Act, PDPA, and industry-specific requirements
- Skilled in risk analysis, issue diagnosis, and developing effective solutions
- Detail-oriented in reviewing documents, policies, and compliance processes
- High integrity, ethical conduct, and confidentiality in handling sensitive information
- Excellent communication skills in English and Bahasa Malaysia; able to explain complex compliance concepts clearly
- Strong organizational and time management skills; able to manage multiple projects and meet deadlines
- Proactive, adaptable, and resilient in changing regulatory environments
- Strong initiative in identifying risks and compliance gaps early
- Collaborative team player with leadership ability and positive attitude
- Must willing to work at Persiaran Lagoon, Sunway City, Petaling Jaya, Selangor
- Able to start immediately will be an added advantage