Regional Privacy Manager APAC

Job description

The Group Data Protection Office (GDPO)

The mission of the GDPO Team is to foster a strong culture of data privacy throughout Brenntag, while providing solution-oriented and pragmatic advice.

Our multi-disciplinary team:

• designs and maintains a global privacy management system,
• advises on data governance and data handling issues throughout the data lifecycle,
• provides guidance to the company on technical and organizational measures as well as data incident response to personal data,
• advises on privacy risk management and governance in relation to the Brenntag's AI strategy and internal deployment.
  
  

What you will do

Brenntag is seeking an experienced individual to form an essential part of the company's Group Data Protection Office.

It is a broad, fast-paced and exciting privacy and data governance role.

The successful candidate will carry out tasks which draw on a wide skillset.

As the Regional Privacy Manager you will directly report to the Head of Group Privacy and will have the responsibility for Brenntag's Privacy Program in the APAC region to ensure alignment with the company's global privacy strategy and framework.

In close cooperation with Brenntag's corporate Group Data Protection Office located in Essen/Germany, you will work to further develop standards, policies, and procedures to ensure an effective Privacy program throughout the regional organization.

This also includes further developing Brenntag's positive privacy culture and implementing processes and systems to identify and manage data privacy risks.

Key responsibilities:

• Work cross-functionally with employees at all levels of the organization to ensure efficient integration of the privacy program into business processes while fostering a positive privacy culture and raising awareness
• Collaborate closely with the Head of Group Privacy and the Group Data Protection Office to align regional practices with global privacy standards
• Support, maintain and enhance Brenntag's global privacy program
• Transform the global privacy strategy into regional initiatives tailored to local requirements
• Oversee and support Local Data Protection Coordinators (LDPCs) to ensure a consistent privacy management system across regional operations
• Implement and improve harmonized processes and systems in line with global strategy.
  
  
• Govern the regional adoption of policies, guidelines, manuals, and procedures for the Data Protection Management System (DPMS)
• Conduct data protection audits to ensure an effective data privacy management system
• Monitor relevant new legal and regulatory developments in the region and implement necessary changes
• Provide practical solutions to address privacy challenges and mitigate risks
• Increase awareness of privacy-related topics through regional awareness campaigns
• Develop and deliver comprehensive privacy training programs to raise organizational awareness, including targeted sessions for Local Data Protection Coordinators and specific departments
• Support (regional) data incident investigations and manage data subject requests
• Support the implementation of privacy initiatives and promote data governance best practices

Who we are looking for

Essential:

The ideal candidate will be able to demonstrate especially the following skills and experience:

• Minimum of 7 years of experience in data privacy/data protection, privacy management, legal, or risk management, ideally in a multinational environment
• Master of Law / Business degree preferred, unless equivalent experience is demonstrated
• In-depth knowledge of data protection laws and regulatory requirements within APAC, including experience with risk assessment, Data Protection Impact Assessments, and strategies
• High-motivation and ability to further develop, manage, and successfully lead project within a complex stakeholder environment
• Strong legal research and analytical skills, with the ability to interpret complex regulations and translate them into practical business advice
• Exceptional interpersonal and communication skills, with the ability to explain complex legal concepts to non-legal audiences and foster cross-functional collaboration in an international environment
• Entrepreneurial and proactive, with the ability to anticipate legal risks, manage competing priorities, and drive data privacy initiatives within a dynamic regulatory environment
• Strong ethical standards, service orientation, and dedication to upholding data privacy/protection integrity across the region
• Strong understanding of data privacy/data protection laws and regulations globally (e.g., GDPR, PIPL, PDPA) with particular focus on APAC; affinity for technology-supported processes
• Ability to handle multiple, competing tasks and deadlines as part of an international team
• Excellent verbal, written and visual communication skills, with attention to detail
• Strong communication skills in English (required; ideally also German), with the ability to effectively convey privacy principles and the company's ethical values across all levels; additional language proficiency is a plus

Preferred:

• Relevant data privacy qualification such as CIPP/E or CIPM
• Experience with privacy tech tools (e.g., OneTrust)
• Experience of working in a risk function or equivalent

Required Skill Profession

Other General