Data Protection Legal Counsel/ Senior Legal Counsel

WE TAKE YOU ABOVE BEYOND

Take your passion to the next level and work alongside other masters of their craft to build a fulfilling and rewarding career at Marina Bay Sands.

Job Responsibilities

Regular

Assists the Data Protection Officer (“DPO”) and Deputy Data Protection Officer (“Deputy DPO”) with the following work:

• Executing an annual work plan at the Company to ensure compliance with the Personal Data Protection Act (“PDPA”).
• Reviewing and executing company policies and procedures for effective personal data compliance management, covering all aspects of personal data care under the 9 PDPA Obligations.
• Communicating internal personal data protection policies, processes and issues to Team Members through internal newsletters, awareness trainings etc.
• Administering the Company’s Data Protection compliance system.
• Administering the orientation and annual refresher training for all employees on personal data protection.
• Working with the User Departments to respond to queries and requests from third parties (vendors, third party casinos, government agencies and other Sands Group companies), members and guests on personal data protection policies and processes.
• Working with the User Departments to manage responses to customer requests to access their personal data and correction in an appropriate and timely manner in accordance with the PDPA Access & Correction Requests Handling Procedure.
• Working with the User Departments to run personal data impact and risk assessments and recommending mitigating controls to User Departments to moderate the identified personal data risks.
• Maintaining the Company’s personal data inventory and ensuring that it is up-to-date.

Periodic

• Conducting topical trainings on PDPA issues.
• Working with the User Departments to reach out to Team Members on PDPA-related activities, such as disseminating information on TM’s responsibilities, personal data protection policies, programme initiatives, etc.

Incident Specific

• Managing PDPA-related incidents and complaints in an appropriate and timely manner in accordance with the PDPA Incident Response Framework.
• Escalating personal data risk alerts, major PDPA complaints and programme implementation issues to the DPO and Deputy DPO for deliberation and decision.
• Working with other stakeholders such as the Cyber and IT departments to implement remediations and mitigation controls.

Job Requirements

Education & Certification

• LLB with minimum of 5 years PQE or equivalent advising on personal data matters
• Certified Information Privacy Professional/Asia (CIPP/A) or equivalent privacy law certification preferred
• Certified Information Privacy Manager (CIPM) preferred
• Fellow of Information Privacy (FIP), Privacy Law Specialist (PLS), Certified Information Privacy Technologist (CIPT), or AI Governance Professional (AIGP) considered an advantage.

Experience

• PDPC investigations, enforcement actions, and breach notifications.
• Drafting and negotiating cross-border data transfer arrangements.
• Data processing agreements and controller-processor arrangements.
• Privacy aspects of AI governance and emerging technologies.
• Supporting cybersecurity incidents and regulatory investigations.

Other Prerequisites:

• Familiarity with GDPR and major international data protection regimes.

Marina Bay Sands is committed to building a diverse, equitable and inclusive workforce, providing equal opportunities as we grow our talent base to match our growth ambitions in Singapore. Our employees are committed to adhere to and abide by all rules, regulations, policies and procedures, including the rules of conduct and business ethics of the Company.