Data Protection Specialist

Job Overview

Join FairPrice Group as a Data Protection Specialist where you will be instrumental in securing the personal information of customers and employees across our diverse digital, retail, food service, and loyalty divisions. Reporting to the Governance, Risk, and Compliance (GRC) - Data Protection team, you will support the implementation, oversight, and ongoing improvement of the Group's Data Protection operations.

Key Responsibilities

• Ensure adherence to the Singapore Personal Data Protection Act 2012 (PDPA) and safeguard sensitive corporate data.
• Conduct Data Protection Impact Assessments (DPIA) by performing compliance evaluations on business systems, databases, and applications both before and after implementation.
• Verify that all established data protection and cybersecurity safeguards remain intact and unaltered after system deployment.
• Collaborate with Business Unit and Corporate Function data owners to comprehensively catalog, map, and document all active data assets and cross-border information flows, maintaining a centralized inventory to prevent undocumented data handling.
• Support rapid incident response by keeping data maps current for regulatory and risk assessment purposes in case of data breaches.
• Implement data retention and disposal audits by scheduling periodic compliance checks across departments and partnering with units to purge outdated personal and commercial data responsibly.
• Conduct regular user access and privilege reviews with system administrators to enforce the principle of least privilege and protect sensitive commercial assets.
• Manage and execute an annual data protection audit schedule accompanied by spot checks, maintaining key compliance metrics for senior management and addressing compliance drift especially related to emerging technologies like AI and chatbots.

Requirements

• A Bachelor’s degree in Law, Information Security, Business Administration, Computer Science, or related fields.
• Preferably hold professional privacy certifications such as CIPP/A, CIPM, CIPT, or a Practitioner Certificate in Personal Data Protection (Singapore).
• Between 3 to 5 years of operational experience in areas such as data protection, privacy compliance, legal affairs, information security governance, or corporate risk management.
• Strong knowledge of the Singapore PDPA and related PDPC Advisory Guidelines.
• Ability to assess digital architectures, software integrations, marketing data flows, and translate regulatory requirements into practical business solutions.
• Excellent communication skills and the confidence to engage senior business stakeholders, ensuring compliance without excessive escalation.