Company description: The National University of Singapore is the national research university of Singapore. Founded in 1905 as the Straits Settlements and Federated Malay States Government Medical School, NUS is the oldest higher education institution in Singapore. About ORMCAt NUS Office of Risk Management and Compliance (ORMC), we not only manage risks to build the University's resilience but also help shape them into opportunities to empower the community. We will continually support and partner with our stakeholders within the University to make this possible. Job Description The Compliance, Data & Technology Risk unit of ORMC is seeking a highly skilled and experienced Compliance Manager to oversee our data privacy and risk management initiatives. The successful candidate will be responsible for ensuring compliance with relevant data protection regulations, managing risks associated with data privacy, and implementing robust data security measures. This role is critical in safeguarding the university's data assets and maintaining the trust of our students, faculty, and staff. DATA PRIVACYReview and update the compliance policies and guidelines in compliance with PDPA and other relevant regulations. Provide regular updates on the policies changes. Support the cloud assessment and provide guidance to the Data Protection queries. Support training for employees from different departments. Review and advise on Data Privacy Impact Assessments (DPIA) and monitor performance of mitigations, where necessary. Report incidents to relevant authorities and stakeholders as required. Develop and maintain incident response plans for data breach incidents. Review and advise on the standard contractual clauses to ensure compliance with relevant data privacy regulations. RISK MANAGEMENTIdentify, assess, and manage risks related to data privacy and security. Develop and implement risk mitigation strategies and action plans. Conduct regular risk assessments and update risk management frameworks as needed. TRAININGDesign and deliver training programs to educate staff and faculty on data privacy and risk management best practices. Promote a culture of data privacy and risk awareness across the university. OTHERSProvide such other support and assistance to the Head of Compliance as required and attend to Compliance matters where necessary. Evaluate and monitor third-party vendors for compliance with data privacy and security standards. Conduct due diligence and regular assessment of third-party vendors. Support in drafting communications for the NUS community on Compliance matters and updates. Qualifications Bachelor's degree and relevant certifications (e.g., CIPP, CIPM, CRISC) is preferred. Strong interest in managing Data Privacy, Whistleblowing / Ethics cases would be preferred.3 to 4 years' work experience in legal, advisory, audit or compliance role, candidates with working familiarity in whistleblowing / ethics would be preferred. Good interpersonal skills in understanding and managing challenging business requirements. Self-motivated and driven with good accountability on achieving objectives. Good team player with demonstrated ability to work with various project groups and inter-disciplinary teams. Experience and knowledge in Personal Data Protection and Data Governance would be an advantage. More Information Location: Kent Ridge Campus Organization: Office of Risk Management and Compliance Department: Compliance, Data & Technology Risk Employee Referral Eligible: Job requisition ID: 27596
#J-18808-Ljbffr