Senior Data Protection Specialist

Job description

Thunes is a global payments network company that moves money around the world in real time.

As a Senior Data Protection Specialist, you will provide immediate, high-impact operational support to deliver personal data protection controls and compliance at Thunes. This 3-month fixed-term contract focuses on accelerating key privacy deliverables, managing active workflows, and maintaining compliance frameworks.

You will collaborate with cross-functional teams to ensure the confidentiality, integrity, and availability of personal and sensitive data. This role is based in our Singapore or London office with the flexibility to work from home one day a week. Reporting directly to and working alongside the Data Protection Officer within the Legal and Compliance function, you will act as a key delivery partner to execute the DPO’s privacy strategy.

Responsibilities

• Take immediate ownership of driving and accelerating some aspects of our vendor data protection reviews to ensure robust third-party processing practices.
• Conduct efficient reviews of new technologies and projects to identify privacy risks, execute Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs) using OneTrust.
• Facilitate the execution of an organisation-wide data inventory and RoPA enhancement project leveraging the OneTrust platform.
• Manage the end-to-end operational workflow for Data Subject Access Requests (DSARs), Erasure requests, and other regulatory rights requests to ensure statutory deadlines are met.
• Deliver immediate, actionable data protection advice to business units, helping them navigate privacy risks during the contract term.

Requirements

• 4+ years of professional experience advising on data protection and privacy matters, with a proven ability to hit the ground running in a short-term contract. Experience within the international cross-border payments industry is highly desirable.
• Contract/Project Delivery: A proven track record of entering fast-paced global environments and immediately managing a varied workload with minimal onboarding.
• Regulatory Knowledge: Deep, current understanding of global data protection legislation and international data transfer requirements.
• Support with the review, negotiation, and drafting of Data Processing Agreements (DPAs) and privacy clauses in contracts, preparing them for final escalation and sign off.
• OneTrust Expertise: Advanced proficiency and hands-on experience using the OneTrust platform for data mapping, inventory, and assessments is essential .
• Highly self-motivated and capable of working independently from day one to drive projects to completion.
• Exceptional verbal and written communication skills with the ability to manage diverse stakeholder groups under tight deadlines.
• Detail-oriented with the agility to thrive immediately in a fast-paced, global fintech environment.
• Bachelor’s degree in law, compliance, IT, or a relevant field.
• CIPP/E, CIPM , or equivalent professional privacy certifications are preferred.