What you’ll do :

- Advise business units on PDPA compliance and related regulations

- Identify privacy risks in personal data handling and propose practical fixes

- Maintain and update Records of Processing Activities (ROPA)

- Review, draft and update Central Group’s privacy policies as regulations change

- Decide when a PIA or DPIA is needed, then run it end to end

- Handle personal data breaches, from investigation and reporting to corrective actions

- Respond to data subject requests (access, correction, deletion) within PDPA timelines

- Track PDPA updates and new regulatory guidance

- Design and deliver PDPA training and awareness activities

- Prepare compliance reports for management and relevant authorities

About you :

- Bachelor’s or master’s degree in Law, IT, Security or a related field

- 3+ years of experience in data protection, compliance or a related field

- Strong knowledge of PDPA and other data protection regulations

- Strong research, analytical and problem-solving skills

- Clear communicator who can train and work with stakeholders at all levels

- Strong Thai and English communication skills

- CIPP, CIPM or another privacy certification is a plus