Job description
As Shopee continues to scale its market-leading e-commerce platform in Singapore, we are seeking a seasoned Data Privacy Officer to own and advance our privacy program. You will champion data protection across the product lifecycle, ensuring compliance with the Personal Data Protection Act (PDPA) and applicable global privacy laws. This role partners with Product, Engineering, Legal, Security, Compliance, and Business teams to embed privacy by design into new features, processes, and data flows.
In this role, you will translate complex regulatory requirements into pragmatic policies, guidelines, and controls. You will lead privacy risk assessments, DPIAs, and data mapping efforts; oversee data subject access requests (DSARs); and coordinate incident response for privacy events. You will negotiate and review data processing agreements with vendors, monitor data transfers, and maintain up-to-date records of processing activities. You will also drive privacy training and awareness across the organization to foster a privacy-first culture.
The ideal candidate is a proactive communicator with strong project management skills, able to influence cross-functional teams and stakeholders. You should be able to interpret regulatory changes, translate them into actionable programs, and report to senior leadership on risk posture and remediation outcomes.
Responsibility
- Lead the design, implementation, and continuous improvement of Shopee's privacy program in Singapore, ensuring alignment with the PDPA and global standards.
- Own data mapping and data flow analysis across products and platforms; conduct DPIAs and privacy risk assessments for new initiatives.
- Manage data subject access requests (DSARs), deletion requests, and data retention schedules with timely, compliant responses.
- Oversee privacy-by-design in product development, including vendor risk management and data processing agreements with external partners.
- Lead incident response planning and coordination for privacy incidents; provide clear communication to stakeholders and regulators as required.
- Monitor regulatory developments, prepare governance reports, and provide training and guidance to teams on privacy requirements.
- Collaborate with Legal, Security, Compliance, and Operations to implement technical and organizational measures that protect personal data.
- Advise on cross-border data transfers, data minimization, and privacy controls to reduce data-related risk across the business.
Qualification
- Bachelor's degree in Law, Information Security, IT, or a related field; advanced privacy, law, or compliance degree is a plus.
- Proven experience as a Data Privacy Officer, Privacy Counsel, or equivalent role with PDPA (Singapore) and familiarity with global privacy laws (GDPR, CCPA) is preferred.
- Strong knowledge of PDPA requirements, data protection concepts, data mapping, DPIA, DSAR, and incident response.
- Privacy-related certifications such as CIPP/E, CIPM, CIPT, or equivalent are highly desirable.
- Excellent written and verbal communication, with ability to influence cross-functional teams and present complex information to senior leadership.
- Experience negotiating and managing vendor privacy and data processing agreements; ability to implement privacy controls and risk-based remediation plans.
- Strong analytical, project management, and problem-solving skills; ability to manage multiple initiatives in a fast-paced environment.
- Fluent in English; ability to work effectively in a multicultural, global company.