Date Privacy Lead, Insurance

This position is responsible for shaping and strengthening the organisation's data privacy framework, ensuring that privacy risks are effectively managed across business units. The role provides strategic guidance on regulatory developments, supports incident handling, and acts as a key advisor to senior leaders on privacy‑related matters.

• Develop, maintain, and enhance the company's data privacy governance structure to ensure risks are identified, assessed, and mitigated appropriately.
• Build and roll out a comprehensive privacy management programme, covering policies, processes, and compliance monitoring activities.
• Offer independent advice to senior management and key stakeholders on new regulatory requirements, business initiatives, and privacy implications across projects.
• Perform or validate privacy risk assessments to ensure data handling practices meet internal and external compliance standards.
• Assist in managing and reporting privacy‑related incidents, ensuring timely escalation and appropriate follow‑up actions.
• Lead activities that drive awareness of privacy requirements across the organisation, including training and communication initiatives.
• Prepare compliance updates and work with relevant teams to ensure that management committees receive timely visibility on emerging risks and insights.
• Represent the compliance function on group ecosystem‑related projects, providing guidance on privacy and regulatory matters.
• Support additional compliance‑related tasks and ad‑hoc initiatives when needed.

• Bachelor's degree in Business, Accounting, Law, or related discipline.
• 8-10 years of hands‑on experience in privacy compliance, ideally gained within the insurance sector.
• Strong understanding of the Personal Data (Privacy) Ordinance; familiarity with the Personal Information Protection Law (PIPL) is advantageous.
• Detail‑oriented, proactive, and capable of working independently with minimal supervision.
• Excellent communication and interpersonal skills, with the ability to engage effectively with stakeholders at all levels.
• Good command of written and spoken English and Chinese.