1. Oversee the implementation and maintenance of data protection policies, procedures, and controls primarily for Thailand operations, while providing support across the broader Southeast Asia region including Singapore, Philippines, Vietnam, Indonesia, and Malaysia
2. Conduct regular audits, risk assessments, and privacy impact assessments to identify and mitigate privacy risks related to data processing activities.
3. Serve as the primary point of contact for data subjects, regulatory authorities, and internal stakeholders on all matters relating to data protection and privacy.
4. Collaborate with cross-functional teams—including legal, IT, product, and business units—to embed privacy-by-design principles into new products, services, and system developments.
5. Provide training, guidance, and awareness programs to employees on data protection obligations, best practices, and incident response protocols.
6. Monitor and interpret changes in regional laws and regulations, proactively assessing impact on business operations and recommending mitigation strategies.

1. Bachelor's degree in Law, with admission to practice law in Thailand;
2. Minimum of 5 years of legal experience, preferably in-house at a multinational corporation or international law firm
3. In-depth knowledge of Thailand's Personal Data Protection Act (PDPA) and the GDPR; knowledge of other relevant ASEAN data protection regulations is an advantage;
4. Fluency in English and Thai; proficiency in Chinese, or ability to communicate with technical teams in Chinese, is preferred;
5. Strong analytical and problem-solving skills, and ability to operate independently in a fast-paced, dynamic international environment with minimal supervision; and/or
6. Certification such as CIPP/E, CIPM, or AIGP is strongly preferred.