Senior Data Protection Officer, Zalo

As the Senior Data Protection Officer (DPO) at Zalo, you will play a pivotal role in shifting and elevating our data privacy compliance framework to align with the new Law on Personal Data Protection. You will be the core strategist and executor ensuring that data privacy is deeply embedded into our technology products, business operations, and corporate culture, safeguarding the data of millions of users.
• Ensure that the data privacy practices, policies and procedures are compliant with the Law on Personal Data Protection,, Data law, PDPL and other relevant privacy laws and regulations;
• Embed privacy considerations into product strategies and business operations, ensuring data protection is a core consideration across all departments. Review and advise on contracts and agreements (such as DPAs, NDAs, ...), while leading initiatives to develop, implement, and enforce strong data privacy policies and procedures. Collaborate with senior leadership to drive privacy compliance throughout the organization;
• Proactively identify privacy risks, monitor self-assessments, and recommend improvements to the privacy roadmap aligned with evolving business needs;
• Assist in the development and maintenance of internal data governance and compliance frameworks (policies, procedures, data flow documentation, etc.);
• Present data-driven arguments to support privacy strategies, manage feedback effectively, and align decisions with privacy impact assessments (PIA) and business impact assessments (BIA);
• Provide guidance on data subject rights (access, correction, deletion, objection, etc.), ensuring the company responds within the required timeframes and processes requests appropriately.

Yêu cầu công việc

• Minimum 3 years of experience in Data Privacy, Information Security, Governance, Risk & Compliance (GRC), or a related legal-tech role.
• In-house experience and background in cybersecurity & compliance issues;
• Strong project management and cross-functional team management skills;
• Experience leading a project or agreement from conception to completion;
• Subject-matter expertise in data privacy laws, rules, regulations, and industry standards;
• Stay up to date with the latest regulatory changes and emerging privacy threats.
Nice to have:
• Working knowledge of GDPR, CCPA, ISO, PCI DSS as well as international privacy, information security and data protection laws;
• Privacy/Information Security certifications;
• Experience in policy development, risk management frameworks, and privacy governance;
• Experience in handling audits and third-party assessments.