Data Protection Officer

Regulatory Compliance

• Ensure full compliance with GDPR, Vietnamese data protection regulations, and NAE policies.

• Monitor changes in legislation and advise leadership on necessary updates.

Policy Development & Documentation

• Develop, implement, and maintain data protection policies, procedures, and privacy notices.

• Maintain accurate records of processing activities and ensure compliance with data retention requirements.

Risk Management & Auditing

• Conduct regular audits and risk assessments to identify vulnerabilities in data handling across all departments (Admissions, HR, Finance, Academic).

• Recommend corrective actions and oversee implementation.

Training & Awareness

• Provide training sessions and ongoing guidance to staff on data protection best practices.

• Promote awareness of privacy obligations across all departments.

Stakeholder Engagement

• Act as the primary point of contact for data subjects, regulatory authorities, and internal stakeholders.

• Respond to inquiries and manage requests related to personal data rights.

Incident Management

• Lead the response to data breach incidents, including investigation, documentation, and reporting.

• Coordinate with relevant teams to implement remedial measures.

Advisory Role

• Provide expert advice on data protection implications for new projects, contracts, and technology solutions.

• Ensure privacy considerations are integrated into organizational planning and decision-making.

Collaboration with IT

• Partner with IT teams to design and implement technical and organizational measures for data security.

• Support the adoption of secure systems and tools.

Reporting

• Prepare and submit compliance reports to senior leadership and NAE.

• Highlight key risks, audit findings, and recommendations for improvement.

Other

• Provide timely and practical legal counsel across the business issues (HR, IP, Commercial, Regulatory, etc.) when requested.

Safeguarding & Personal Development

• Child Protection: Work closely with the Designated Safeguarding Lead (DSL) to ensure the highly sensitive data involved in child protection cases is handled with maximum confidentiality and security.

• Continuous Learning: Maintain professional expertise by staying current with evolving privacy laws in Vietnam and international best practices (GDPR).

Any other task required by the line managers

Working hour: from Monday to Friday, from 8:00 to 5:00

• Vietnamese – Essential

Qualification/ Training:

• Bachelor ‘s degree in Law, IT, or related field - Essential.

• Certification in Data Protection (e.g., CIPP/E, CIPM) is preferred - Desirable

Experience:

• Minimum 5 years in compliance, legal, or data protection roles - Essential.

• Experience in educational or international organizations is an advantage – Desirable

• Experience conducting audits, risk assessments, and incident investigations - Essential.

• Strong analytical and problem-solving abilities - Essential.

Skills:

• Strong knowledge of GDPR and Vietnamese data protection laws - Essential.

• Ability to balance regulatory requirements with operational needs - Essential.

• Collaborative mindset with the ability to work across departments - Essential.

• Uses evidence to support arguments or positions taken - Essential.

• Outstanding written and verbal communication skills in Vietnamese and English - Essential

• High teamwork spirit - Essential

• Excellent time management and organizational skills - Essential

• Excellent attention to detail – Essential

• Affinity with and interest in education - Desirable