Data Protection Officer

Mức lương: Thỏa thuận
Địa điểm: Hồ Chí Minh
Kinh nghiệm: Không yêu cầu
Bằng cấp: Đại Học trở lên

Hạn nộp hồ sơ: (Đã hết hạn)

Việc Làm Gợi Ý

Data Engineer

Adstart Media

Hồ Chí Minh Đến 20 triệu VNĐ

Nhân Viên Vận Hành Máy In Kỹ Thuật Số

Công Ty TNHH Đầu Tư Nam Thuận Phát

Hồ Chí Minh 9 - 12 triệu VNĐ

Chuyên Viên Phân Tích Dự Án (FS Analyst) - Lương 30 - 45 Triệu (Nghỉ Chiều T7, CN)

Công Ty TNHH XNK TMDV Querencia

Hồ Chí Minh 30 - 45 triệu VNĐ

Kiến Trúc Sư

Công Ty TNHH Kiến Trúc Thủy Mộc

Hồ Chí Minh 13 - 20 triệu VNĐ

System Analyst/Senior System Analyst

Chi Nhánh Công Ty TNHH Sức Khỏe Trọn Đời Tại TP. Hồ Chí Minh

Hồ Chí Minh Đến 20 triệu VNĐ

Nhân Viên Kỹ Thuật Lắp Đặt – Thi Công

Công Ty TNHH Tân Liên Thông

Hồ Chí Minh Thỏa thuận

Kỹ Sư Hệ Thống Nội Bộ (Se) (Tiếng Nhật hoặc Tiếng Anh giao tiếp) - MSCV 237-2

Công Ty TNHH Quick Việt Nam

Hồ Chí Minh Đến 18 triệu VNĐ

Nhân Viên IT - Tiếng Nhật N4 - Hồ Chí Minh

Công Ty Cổ Phần Kết Nối Nhân Lực Worklink Việt Nam

Hồ Chí Minh Thỏa thuận

Kỹ Sư Dự Án - Điện Tự Động Hoá

Công Ty Cổ Phần Công Nghệ Bách Việt

Hồ Chí Minh Thỏa thuận

Chuyên Viên Quản Trị Hệ Thống Và Chính Sách

Công Ty TNHH Thương Mại Và Dịch Vụ Nhã Phượng

Hồ Chí Minh Thỏa thuận

Công Ty TNHH Minh MCC.Group Việt Nam

Xem thông tin công ty

Thông tin
Việc làm

Địa điểm làm việc:

Hồ Chí Minh

10Floor, 115 Nguyễn Huệ, Ho Chi Minh City, Ho Chi Minh

(Trước sáp nhập: Quận 1, Hồ Chí Minh | Sau sáp nhập: Sài Gòn, Hồ Chí Minh)

Chi Tiết Công Việc

Mô tả công việc:

The Data Protection Officer (DPO) will oversee the design, implementation, and monitoring of data protection controls, and will serve as a key point of contact for regulators, internal stakeholders, clients (for inhouse privacy-related matters) and the KPMG network.
Key Responsibilities
Governance, Policies and Procedures (Vietnam & Network Alignment)
Develop, implement, and regularly update KPMG Vietnam’s and, where relevant, KPMG Cambodia’s personal data protection policies, standards, procedures, and templates in alignment with:
Vietnam PDPL and other data protection regulations;
Cambodia’s applicable data/privacy and cybersecurity regulations; and
KPMG Global Privacy requirements and network policies.
Manage and develop all core privacy documentation (e.g., privacy notices, consent mechanisms, contractual clauses) to ensure it is both legally compliant in relevant jurisdictions and aligned with KPMG’s global privacy requirements.
Develop and maintain operational procedures and guidance documents to support key privacy processes, including data subject rights handling, incident and breach management, management of data sharing/processing arrangements, and the introduction and use of new technologies.
Compliance Monitoring and Internal “Privacy Audit”
Establish and maintain a privacy compliance framework for KPMG Vietnam and, where applicable, Cambodia, including:
Periodic internal privacy assessments and “privacy audits”;
Gap analyses against PDPL and KPMG network requirements;
Action plans and tracking of remediation measures.
Prepare regular compliance reports for local leadership (Vietnam and Cambodia, as applicable) and for the KPMG Global/Regional Privacy network as required by network standards.
Support the assessment and classification of critical/core data sets under the Law on Data and related regulations managed by the MPS.
Impact Assessments (Vietnam PDPL Requirements; Network Oversight)
Lead the preparation, maintenance, and submission (for Vietnam) of:
Data Processing Impact Assessment (PIA); and
Overseas Data Transfer Impact Assessment (TIA).
Ensure PIAs and TIAs are updated whenever there are new or changed data processing activities (e.g., new tools, new client engagements involving data sharing, new service delivery models, new technologies such as biometric access control and CCTV).
Coordinate timely submission of updated PIA/TIA dossiers to the MPS at least every six months, as required by Vietnamese law.
Data Subject Rights and Data Breach Management
Design and manage procedures for receiving, verifying, and responding to data subject requests in Vietnam (and, where applicable, Cambodia) within statutory or KPMG network timelines.
Liaise with HR, IT, business units and other stakeholders to ensure effective and timely handling of data subject rights (access, correction, deletion, restriction, withdrawal of consent, etc.).
Implement and oversee the data breach response framework for Vietnam and, where relevant, Cambodia, including:
Triage and investigation;
Coordination of technical and organizational remediation;
Assessment of notification obligations to MPS and other authorities;
Coordination of communication to affected data subjects and KPMG network stakeholders (where applicable).
Maintain logs of data subject requests and incidents/breaches; report significant incidents to local leadership and KPMG Global/Regional Privacy Office.
Advice on Projects, Contracts, Tools and Cross-Border Arrangements
Provide privacy and data protection advice on new projects, tools, engagements and initiatives of KPMG Vietnam and (where relevant) KPMG Cambodia, including:
New client services, digital platforms and analytics tools;
HR initiatives (e.g., biometrics, CCTV, employee monitoring, platforms);
Outsourcing, cloud, and cross-border data transfers.
Review, draft, and/or provide input on data protection clauses in contracts with clients, suppliers, and other third parties (data processing agreements, data sharing agreements, data transfer agreements) to ensure compliance with PDPL and consistency with KPMG global templates.
Training, Awareness and Culture (Vietnam, Cambodia, Network)
Develop and implement annual training and awareness programs on privacy and data protection for staff in Vietnam and Cambodia, in alignment with KPMG Global learning requirements.
Deliver induction and refresher training sessions, as well as targeted training for high-risk areas (e.g., HR, IT, client-facing teams processing large volumes of personal data).
Coordinate with the KPMG Global/Regional Privacy Office to roll out global training modules and update local content as laws and network requirements evolve.
Promote a strong culture of privacy and data ethics across both Vietnam and Cambodia firms.
Regulatory Liaison and KPMG Network Coordination
Act as the primary contact point for the Ministry of Public Security and other competent Vietnamese authorities on personal data protection issues (inspections, queries, audits).
Coordinate with KPMG Cambodia’s management to:
Monitor local regulatory developments;
Support responses to any privacy-related regulatory inquiries, if they arise; and
Align local practices with KPMG global privacy requirements.
Serve as the Privacy Liaison Officer to the KPMG Global/Regional Privacy network, including:
Providing required reports and metrics (e.g., incidents, PIA/TIA status, key risks);
Participating in network privacy initiatives, meetings, and working groups;
Implementing global privacy projects and guidance locally in Vietnam and Cambodia.
Monitor regional and global privacy developments and assess their implications for Vietnam and Cambodia.

Yêu cầu công việc:

University degree (Bachelor’s or higher) in Law, Information Technology, Cybersecurity, Risk Management, Compliance, HR, or related discipline.
At least 5 years of relevant professional experience in one or more of the following: legal/compliance, IT/security, data protection, risk management, internal audit, HR, or similar.
Demonstrated knowledge of Vietnamese data protection regulations.
Completed or willing to complete formal training in personal data protection law and data protection practices.
Experience in a professional services, financial services, or multinational environment.
Familiarity with data protection or privacy requirements in Cambodia or other ASEAN jurisdictions.
Professional certifications such as CIPP/E, CIPP/A, CIPM, CIPT, or ISO 27001 are a strong plus.
Strong understanding of data protection principles, privacy-by-design and risk-based compliance.
Ability to interpret and apply local laws while aligning with global policies and standards.
Strong analytical and problem-solving skills; able to identify and communicate pragmatic solutions to the business.
Excellent communication and stakeholder management skills, including cross-border coordination and dealing with senior leadership.
High integrity, professional ethics, discretion, and a strong sense of responsibility.
Ability to work independently, prioritize effectively, and manage multiple workstreams.
Strong organizational skills and attention to detail, particularly regarding documentation and regulatory submissions.