Data Protection & Compliance Specialist

I. Objective:

The role of this position is responsible for developing and implementing systems, processes, and strategies to ensure data security, compliance, and efficient data management. This role will also support the design and optimization of the company’s data warehouse to enable reliable analytics and business intelligence. Objectives of the role:

– Act as the primary contact for staff, regulators, and public authorities on data protection matters.

– Ensure company policies and practices comply with relevant data protection regulations, including:

+ GDPR (General Data Protection Regulation).

+ Decree 13/2023/ND-CP.

+ Law 60/2024/QH15.

+ Other applicable laws and internal policies.

– Evaluate and enhance the company’s data protection framework.

– Provide training and guidance to staff on data protection and compliance.

– Support data processing operations and collaborate with business partners to ensure secure and efficient data handling.

II. Job Description:

1. Data Protection & Compliance (60%)

• Serve as the liaison with data protection authorities and regulatory bodies.

• Advise data controllers and processors on compliance matters.

• Draft, update, and implement internal data protection policies and procedures.

• Conduct audits and assessments to identify compliance gaps and recommend corrective actions.

• Maintain accurate records of all data processing activities.

• Deliver training sessions and awareness programs for employees handling personal data.

• Promote a culture of compliance and data protection across departments.

2. Data Processing & Administrative Support (40%)

• Execute SQL queries to extract and analyze data for reporting and compliance.

• Support data mining initiatives to identify trends and operational insights.

• Collaborate with business partners to understand data needs and deliver actionable information.

• Collect, clean, and manage data from internal systems.

• Organize and maintain documentation related to data governance and privacy.

• Assist in administrative tasks related to IT/IS operations, including coordination and reporting.

• Collaborate with cross-functional teams to develop and optimize the data warehouse, ensuring scalability and performance.

• Monitor and analyze data flows to identify risks, inefficiencies, and opportunities for improvement.

Required Skills and Qualifications

• Minimum 3 years of experience in data protection, compliance, or related fields.

• Strong understanding of GDPR, Decree 13/2023/ND-CP, and Law 60/2024/QH15.

• Background in legal, audit, risk management, or IT governance.

• Strong knowledge of ETL processes, SQL, Oracle DWH and database management systems.

• Excellent project management and organizational skills.

• Ability to manage confidential information and perform under pressure.

• Good communication skills in both English and Vietnamese.

• High attention to detail and integrity.

Preferred Skills and Qualifications

• Bachelor’s degree in Computer Science, Law, Information Systems, or related field.

• Experience in incident handling and risk analysis.

• Skilled in internal communication and training delivery.

• Familiarity with compliance documentation and regulatory reporting.

• Knowledge of BI tools and data visualization platforms is a plus.

• Experience with cloud-based data platforms (e.g., Azure, Oracle Cloud).