Data Privacy Officer

Data Protection Officer

Company: National Development Bank PLC

This role involves advising and guiding the organization, evaluating compliance levels and maintaining the Data Protection Management Program of the Bank to meet personal data protection requirements and manage risk effectively.

The Job

• Be the primary advisor to the Bank on personal data protection obligations
• Own the Bank's Data Protection Management Program and develop, review, and update personal data protection policies, governance structures and procedures to meet personal data protection obligations
• Ensure policies align with statutory requirements and organizational objectives
• Monitor compliance with personal data protection laws, internal policies, and best practices
• Identify and address areas of non-compliance or partial compliance with data protection regulations
• Provide advice on Data Protection Impact Assessments (DPIAs) and oversee their execution
• Monitor and evaluate risks related to data processing operations, considering the nature, scope, and purposes of personal data processing
• Establish a robust control environment that is periodically reviewed and strengthened to ensure compliance with all applicable policies
• Serve as the primary point of contact for staff, regulators, and supervisory authorities on personal data protection matters
• Develop and deliver data protection training programs for staff at all levels to promote awareness and compliance
• Lead the Bank's personal data related incident response including establishing processes for identifying, managing and necessary notification of personal data breaches

The Person

• Possess at least 7 years of relevant experience in Data Privacy, Information Security, IT or a related discipline, including hands-on experience in assessing technology solutions against information security and data protection requirements. Experience in the financial services sector can be an added advantage
• Possess a good understanding of the Sri Lanka Personal Data Protection Act and its requirements
• Knowledge of banking operations and Good Knowledge of IT and information security fundamentals and experience in evaluating technology solutions for compliance with information security and data privacy requirements
• Possess one or more personal data protection related qualifications such as CIPP, CIPM, CDPSE, CDPO
• Knowledge of relevant ISO standards
• Experience with reviewing legal agreements and qualifications in law would be an added advantage
• Expertise in handling data breaches, audits, data subject requests, and data protection impact assessments
• Excellent analytical and conceptual thinking skills

Position Level: Manager Level

Please login to https://www.ndbbank.com/careers to apply on or before 07th October 2026.