Senior Assistant Manager, Data Protection Office

About the role

NHG is hiring a Senior Assistant Manager for its Data Protection Office at Woodlands Hospital. The role supports the implementation, operationalisation and strengthening of the hospital's Data Protection Programme in line with the Personal Data Protection Act (PDPA), Ministry of Health (MOH) requirements, NHG policies and institutional data protection needs. It also supports the Director and Assistant Director of the Data Protection Office in coordinating with internal stakeholders, NHG, MOH, PDPC, Synapxe and other partners on governance, compliance, risk assessments, data security, incident management and staff awareness.

Key responsibilities

• Conduct data protection compliance reviews, audits and assessments across departments, and support DPIAs, risk assessments and compliance reviews for new systems, projects and programmes.
• Plan, coordinate and monitor the Data Security Maintenance Programme (DSMP) and reporting requirements.
• Support implementation of PDPA obligations, MOH requirements and NHG policies, and vendor and third-party data protection risk assessments and contractual data protection requirements.
• Support data security controls, including secure handling requirements, Data Loss Prevention (DLP) governance and related investigations.
• Coordinate with ITD, Synapxe, cybersecurity and governance stakeholders, and manage reporting, escalation and coordination of data protection incidents, near misses and breaches, including investigations, root cause analysis and post-incident reviews.
• Prepare reports, dashboards and presentations for management, committees and regulatory reporting.
• Develop and run data protection awareness, engagement and training programmes for staff, DP Leads and key stakeholders, and support policy communications and campaigns.
• Support accreditation, audit, licensing and assurance activities, and mandatory reporting to NHG, MOH and PDPC.
• Support AI and emerging technology reviews, including assessment of compliance, security and operational risks.
• Support the annual workplan and budgeting, procurement, contract management and quality improvement initiatives, and maintain data inventories, data flow documentation and governance records.