Reports to: Associate General Counsel – Privacy, Data & AI Compliance - DPO

The Group Legal and Compliance (GLC) department provides the Group with sound and pragmatic advice on legal issues. Our team handles a range of commercial, corporate, employment law, data privacy, competition law and regulatory matters. We handle litigation and regulatory and investigations which involve the Group. We also develop and implement Cathay’s compliance policies and programmes, including competition, anti-bribery, sanctions and data privacy.

As the Assistant Privacy, Data & AI Compliance Manager, you will provide comprehensive compliance and administrative support to the Privacy, Data & AI Compliance team within the Group Legal and
Compliance department. This role involves monitoring the DPO mailbox, collect, consolidate and analyse data from multiple stakeholders to support the team’s functions. Additionally, this role will provide support managing vendors’ payments (e.g. through the Legal Tracker), processing expense claims, and scheduling multi-party meetings.

Key Responsibilities

Compliance Support:

• Manage the Data Protection Office mailbox (e.g. assign the emails received to the right stakeholders, alert the team of the reception of regulatory requirements, etc.)
• Maintain the questionnaire template in assessment automation and data mapping platform (OneTrust) up to date. Monitor the Data Guidance and aosphere web-based tools to alert the team on new privacy requirements
• Collect and consolidate data from multiple internal stakeholders (e.g. evidence samples for the Data Monitoring Programme, personal data to respond to Data Subject Rights, etc.)
• Analyse and summarise complex data sets (e.g. spreadsheets, system logs, etc.) to support the team’s processes (e.g. data incident handling). Maintain and update the Privacy, Data & AI Compliance team’s resources and materials as required. Assist in the preparation of periodic reports and presentations

General Administrative Support:

• Having primary responsibility for managing Legal Tracker - the web-based system which is used to maintain legal matter information and handle electronic invoices from law firms. This includes learning how to use the system, data entry, liaising with law firms and CX Group Departments and answering any questions they may have in relation to how to use the system, to provide training to CX Group Departments on how to use the system, generating reports relating to legal spend and undertaking preliminary analysis of legal spend against the legal budget
• Create purchase orders, perform goods receipt and coordinate payment in SAP for the Privacy, Data & AI Compliance team and perform invoice vetting before submitting for settlement
• Tracking and monitoring agreed law firms’ rates and agreed fee proposals with law firms to ensure the CPA Group is not charged more than what has been the agreed
• Tracking and monitoring legal spend with external law firms against the CPA Group legal fee budget. Analyse and prepare budget reports. Coordinate and assist with the budget process / oversight legal cost
• Liaise with external legal advisors and other service providers about their services
• Managing daily schedule, co-ordinate and set up meetings, appointments with internal and external parties. Provide administrative support to the Associate General Counsel – Privacy, Data & AI Compliance - DPO and manage administration work for onboarding and offboarding arrangements, such as submitting IT service requests and applying system access rights for new joiners, secondees, summer interns, etc

Requirements

• Tertiary Education
• A minimum of 7 years working experience in supporting Legal, Compliance and/or IT functions
• Exposure to privacy, security and/or AI laws or technical standards is an advantage
• High proficiency in office applications (including Word, PowerPoint, Excel and SharePoint)
• Experience using OneTrust (or similar compliance platforms) is an advantage
• Good problem-solving skills and capable to handle sensitive and confidential information
• High proficiency in English and Chinese
• Strong planning and organizing skills with high attention to details
• Ability to work flexibly and on multiple tasks
• Excellent communication skill to interact with internal clients and external legal advisors

Application Deadline: 24 APR 2025

Personal & Application Information

Cathay Pacific is an Equal Opportunities Employer. Personal data provided by job applicants will be used strictly in accordance with our personal data policy and for recruitment purposes only. Candidates not notified within eight weeks may consider their application unsuccessful. All related information will be kept in our file for up to 24 months. A copy of our Personal Information Collection Statement will be provided upon request by contacting our Data Protection Officer.

For any frontline recruitment related enquiries, please reach out to us by Whatsapp +852 2747 2298