The Chief Data & Analytics Office (CDAO) at JPMorgan Chase drives the firm’s data and analytics capabilities, supporting risk management, business strategy, and operational excellence. The Asia Pacific CDAO advances the firm’s data and analytics strategy, platforms, and governance to deliver responsible and innovative outcomes across APAC markets.
As Vice President for the APAC Data Privacy within the Firmwide Privacy Office, you will support the development and execution of the firm’s privacy program across the Asia Pacific region. This role offers the opportunity to work in a dynamic, regulated financial environment, collaborating with cross-functional teams to ensure compliance, operational effectiveness, and a strong culture of data protection.
Key Responsibilities
- Support projects to strengthen the firm’s privacy program from an APAC perspective.
- Assist in the design and implementation of privacy initiatives, adapting global programs for the APAC region.
- Advise on privacy requirements for new business initiatives, including privacy notices, cookies notices, and regulatory compliance.
- Help map regulatory requirements for Data Protection Officers (DPOs) across APAC.
- Contribute to data incident risk assessments and breach notification processes.
- Draft and maintain governance documentation, such as Statements of Responsibility, appointment documents, policies, and procedures.
- Assist in developing and implementing Firmwide Privacy Office (FPO) standards and procedures for APAC.
- Support the development of privacy controls and training programs, including those related to privacy regulator interactions.
- Provide guidance on AdTech, online tracking, biometrics, AI, children’s privacy, and data deletion.
- Participate in training sessions and regional strategy planning.
Required Qualifications, Capabilities, and Skills
- Bachelor’s degree in Law, Economics, Business or related field.
- 8+ years of experience in privacy program design and implementation, preferably within the financial services or regulated sector.
- Strong technical skills and ability to advise on privacy requirements for new initiatives.
- Experience with data protection impact assessments, risk assessments, and breach notification processes.
- Knowledge of APAC privacy laws and regulations, with familiarity in global frameworks such as GDPR and CCPA.
- Ability to work independently and collaborate across functions and geographies.
Preferred Qualifications, Capabilities, and Skills
- Legal or compliance background.
- Familiarity with the three lines of defense model.
- Privacy certifications such as CIPP-A, CIPP-E, CIPP-M, or equivalent.
- Understanding of AdTech, online tracking, and emerging privacy technologies.
- Experience supporting DPO activities and participating in DPDA programs.
- Design and operationalize technology controls for privacy and data risk.
- Translate privacy/business requirements into implementable technology controls across big data and AWS environments; oversee/challenge 1LOD Data, Privacy & AI controls, define/execute data risk testing, and continuously monitor control effectiveness, gaps, KRIs/MI, and remediation.
- Drive data quality and governance controls using SQL, DataBricks, and metadata/catalog tooling (e.g., Informatica/Collibra, RDHP, Jade); analyze complex datasets, report DQ findings/trends and emerging risks.