Group Privacy Legal Counsel (Privacy)

TL;DR

Group Privacy Legal Counsel (Privacy/Legal): Managing global privacy compliance and mitigating data risks across various business units with an accent on privacy-by-design, AI regulations, and cross-border data transfers. Focus on drafting DPAs, conducting DPIAs, and ensuring compliance with GDPR and CCPA across international operations.

Location: Preferably Hong Kong or Singapore

Company

A global powerhouse in the Internet and online game industry with a market capitalization of $80+ billion.

What you will do

• Maintain and update global privacy policies, notices, and internal frameworks across diverse business units.
• Collaborate with product and engineering teams to implement privacy-by-design and responsible AI principles.
• Provide legal guidance on cross-border data transfers and document Data Protection Impact Assessments (DPIAs).
• Draft and negotiate Data Processing Agreements (DPAs) and privacy provisions in commercial contracts.
• Investigate potential data/cybersecurity incidents and manage regulatory notification obligations.
• Design and deliver privacy and AI awareness training across global offices.

Requirements

• Qualified lawyer in the U.S., Hong Kong, Singapore, UK, and/or Canada.
• 4 to 8 years of legal practice focused on privacy, data protection, cybersecurity, and emerging technologies.
• Fluency in English and Mandarin Chinese.
• Preferably based in Hong Kong or Singapore.
• Strong understanding of data flows, cloud computing, and modern IT architecture.

Nice to have

• CIPP/E, CIPP/US, or CIPM certifications.
• Experience in both major law firms and in-house corporate environments.
• Familiarity with the interactive entertainment industry.

Culture & Benefits

• Opportunity to work in a dynamic, cross-border environment across different disciplines and cultures.
• Role provides exposure to diverse innovative businesses including gaming, music streaming, and AI technology.
• Collaborative environment working directly with the Head of Privacy & Data Protection.