Data Protection Officer

MISSION: The Data Protection Officer is responsible for the implementation of data privacy compliance across Vietnam.

This role supports teams within their scope in meeting regulatory requirements, fosters a culture of privacy and protection, and supports the practical application of privacy controls reflecting the Data Risk Assurance Framework & relevant SE policies, including BCR.

This role's key responsibilities include support to operational implementation, incident response & training.

For country-level roles, the Officer also serves as the primary point of contact for local Data Protection Authorities

RESPONSIBILITIES

Regulatory Compliance Leadership


* Advise on and monitor operational compliance with Vietnamese personal data protection law and its implementing regulations, together with other applicable regulations on cybersecurity, data, electronic transactions and sector-specific privacy requirements; support day-to-day compliance, compliance governance and processes, and ensure that consent-based processing satisfies Vietnamese law requirements.


* Support the execution of the Data Risk Assurance Framework using Company tools, templates, and guidelines.


* Perform regular compliance audits.

Data Risk Assurance Framework Implementation


* Build and execute a data risk assurance action plan using the centrally provided Data Risk Assurance Framework


* Maintain a processing register - using Company centrally provided tools and processes - to inventory data processing activities within their scope.


* Promote and support the digital certification of all digital assets within their scope


* Draft, review, and negotiate data protection clauses, including data processing agreements, data sharing agreements, cross-border transfer terms, confidentiality and security obligations, and privacy terms in customer and vendor contracts, ensuring alignment with Vietnamese law and Schneider Electric policies.

Training & Awareness


* Reduce potential risk exposure for the company by promoting a culture of data protection through awareness campaigns and training sessions.


* Provide regular training and guidance to employees on their privacy responsibilities and best practices.

Data Breach Management


* Report privacy incidents and, from a data privacy perspective, document and lead investigation, assessment, remediation and escalation activities in accordance with the Cyber Incident process, Company policies and applicable Vietnamese statutory notification requirements.


* Prepare required regulatory notifications, incident reports and supporting records for submission or explanation to competent Vietnamese authorities, where applicable.


* Promote that all privacy incidents are reported via the Cyber Incident process.


* Ensure awareness of data breach management process within their scope.


* Maintain a register of data breaches.

Governance & Reporting


* Establish and maintain priva...