Data Protection Officer - Counsel

Job Overview

We are looking for a seasoned Legal Counsel to serve as OSL's group coordinator for matters concerning data protection, privacy, and AI governance. This position is part of our Global Legal team and reports directly to the General Counsel. The role spans multiple jurisdictions including the EU/EEA, UK, Australia, Singapore, Bermuda, the US, and Brazil.

The appointed candidate will hold statutory Data Protection Officer (DPO) roles where applicable. Ideally, you are a skilled lawyer with experience in fintech, securities, payments, or cryptocurrency sectors with practical knowledge of data privacy. You do not need to be exclusively specialized in privacy but must be comfortable assuming an independent statutory position and collaborating across divisions, engaging with regulators, engineering groups, and senior management.

Key Duties

• Serve as the designated DPO or Privacy Officer for eligible entities, acting as primary liaison for supervisory authorities.
• Manage the group’s Data Registers and Records of Processing Activities (RoPA), retention schedules, cross-border transfers, and adherence to applicable regulations.
• Provide advisory support to Product, Engineering, Security, and Risk teams on privacy-by-design principles and lead AI governance efforts, including managing the AI model inventory and compliance with AI Act risk classification.
• Prepare and negotiate Data Protection Agreements (DPAs), Standard Contractual Clauses (SCCs), and outsourcing terms, harmonizing obligations under GDPR Article 28, MiCAR Article 73, and DORA Article 30(3).
• Oversee the multi-jurisdictional incident and breach matrix, acting as the legal lead during ongoing data incidents.
• Manage data subject rights operations and directly handle complex or regulator-escalated privacy requests.
• Design and deliver the annual group privacy and AI governance training program.

Candidate Requirements

• Qualified lawyer with over 5 years post-qualification experience, specifically within fintech, securities, payment, or crypto industries.
• Strong practical understanding of data protection and privacy laws, including frameworks such as GDPR, UK GDPR, Singapore PDPA, Bermuda PIPA, and Australian Privacy Act.
• Fluency in English alongside Mandarin or Cantonese is mandatory.
• Proven experience drafting and negotiating DPAs, SCCs, and data transfer documentation; experienced in handling data breaches, regulator communications, and data subject access requests.
• Professional certifications such as CIPP/E, CIPM, or related information/cybersecurity qualifications are desirable but not essential; relevant hands-on experience is equally valued.
• Ability to operate independently in a statutory capacity and effectively collaborate with Compliance, Risk, IT, MLRO, and CISO teams.

Company Vision and Mission

OSL is the premier SFC-licensed digital asset platform based in Hong Kong and a pioneer in PayFi innovation. Our mission is to build the next-generation payments network using stablecoins for payments, cross-border settlements, and global licensing.

Stablecoins have emerged as an everyday currency in emerging markets and are widely regarded as the "killer app" for blockchain technology. Industry focus is shifting towards real-world adoption of consumer and enterprise payments. High growth potential resides in cross-border B2B payments, where stablecoin integration in corporate settlement workflows can capture significant transactional volume and liquidity.

OSL holds licenses across Hong Kong, Japan, Australia, Bermuda, and Indonesia, with plans to expand into Europe, Brazil, Southeast Asia, and Africa through acquisitions and licensing. Our platforms, OSL Pay and StableX, integrate stablecoin settlement into bank accounts and card networks, support more than 150 digital assets, and enable 24/7 fiat to stablecoin exchange.

As a well-regulated trailblazer with a startup approach, we believe that future payment systems will be defined by real adoption and scalability rather than technology hype. We invite individuals passionate about crypto and payment infrastructures to join us in building compliant, global payment solutions.