Job Summary:

At HKEX Group, we are committed to best practices in handling Personal Data and assuring our work complies with applicable data-related rules and regulations. We are seeking a motivated and dynamic individual to join our Group Data Protection Office (GPDO) with primarily responsibility in supporting the firm’s day-to-day privacy operations through assisting our Group Data Protection Officer in defining and enhancing data privacy governance as well as ensuring the GDPO evolves progressively to facilitate key business developments to align our firm’s strategy in leveraging data and new technologies for better efficiencies and innovations. 

Working in the HKEX Group Legal Department, the role will also play a critical part in supporting the any initiatives and projects with focus on enhancing the firm’s global operations around personal data and its governance. Our ideal team member will be a proactive individual with the knowledge and confidence to handle and drive operational tasks.

Job Duties:

Data Privacy Governance

• Support the GPDO in the review of internal privacy and data protection policies, standards, guidelines, and procedures, in consultation with key stakeholders across the business, support units, and control functions (including Internal Audit);
• Assist in the implementation of privacy compliance mechanisms for HKEX at a group level; 
• Maintain a mapping of data flows and Record of Processing Activities – performing quality control to ensure consistency and alignment with documented procedures;
• Drive consistency of processes across workstreams that impact privacy and data protection risk;
• Assist the GPDO in performing monitoring and review initiatives (including privacy impact assessments and reviews of third parties) and driving the completion of risk-remediation plans;
• Populate and maintain a Data Risk Register;
• Provide privacy and data protection related advice (including the review of contracts as necessary) to the business and support departments to ensure compliance with data-related laws and the Group's requirements and standards;
• Support the development and delivery of tailored privacy and data protection training so as to increase awareness of policies, practices, and obligations across all divisions;

Project Management

• Provide project management support for key projects and process enhancement of GPDO
• Work closely with internal stakeholders and external supplier to support on project implementation and execution
• Participate in ongoing IT project and provide support in project management, system testing, data tagging/cleansing, change management activities, user training and post implementation support
• Collaborate and liaise with other IT teams, cross departments and vendors in project implementation
• Monitor and provide regular update on implementation status and timely escalation
• Carry out ad-hoc assignments as required

Requirements:

The ideal candidate for this role should possess the following attributes:

• Strong interest in Data Privacy issues, developments and regulatory landscape
• University degree (preferably major in laws, business, governance or related disciplines)
• Minimum 8-10 years working experience with 5 years of direct interactions with senior stakeholders
• Ability to understand, anticipate and address requirements and expectations of senior stakeholders
• Attention to details with strong logical thinking with eager to learn and adapt to dynamic environment
• Self-motivated with strong communication and interpersonal skills
• Ability to lead projects/small teams and provide guidance to other team members across departments
• Technology savvy (preferably with solid understanding on and interest in IT infrastructure and technology and working experience on Microsoft Power Platform)
• Good analytical and problem-solving skills
• Good command of written and spoken English and Chinese (preferably with proficiency in written and spoken Simplified Chinese)

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.