Associate Legal Counsel, Data Protection Office, Legal

ROLE PURPOSE

Provide in-house legal counsel and services, as well as to assist the Bank in managing its legal risks and protecting its interests relating to data protection and data privacy including Personal Data Protection Act 2010 (PDPA), General Data Protection Regulation (GDPR), and law relating to official secrets, confidentiality and data sharing in the following matters:

• legal advice and solutions on law, governance, contract and legal risks;
• drafting/vetting primary and secondary legislation; and
• drafting/vetting contracts and other documents.

PRINCIPAL ACCOUNTABILITIES

1. Assist the Bank in managing legal risks and protecting its interests relating to data protection and data privacy by providing or collaborating with other legal counsels in providing the following services ─

• preparing quality, timely and practical legal opinions, guidance and solutions including the application of relevant laws to operational activities of the Bank;
• preparing or reviewing clear and precise draft primary and subsidiary legislation;
• meticulous drafting and vetting of contracts and other documents to protect the Bank's legal interests with appropriate legal rights and remedies;
• developing and designing internal policies and procedures in line with updated and applicable laws, regulations, standards, guidelines, codes of practices and other subsidiary legislation;
• reviewing and providing consultation to Bank staff on the Privacy Impact Assessment and Transfer Impact Assessment;
• oversee the Bank's adherence to relevant laws and internal policies to ensure continuous compliance
• preparing compliance reports and conduct and/or facilitate personal data audits;
• liaising with, collaborating with and managing internal and external stakeholders such as ministries, Personal Data Protection Commissioner, Attorney General's Chambers, Treasury Solicitor's Office, Malaysian Bar Council, Royal Malaysia Police, other Government agencies, external legal firms and the public
• assist the Data Protection Officer (and/or the department where necessary) in managing
  resources within the Unit and promote progressive enhancement to their technical and
  leadership competencies in meeting the department's needs and mandates;
• Legal Knowledge, Learning and Awareness
  • Monitoring and research on domestic law development & updates via articles in internal
    communication platforms or any other platform approved by the Bank and memo to the
    Bank's management (if needed);
  • Where relevant, suggest countermeasures to legal development that has impact on the
    Bank;
  • Conduct training and KSS session (whether JUN internal or Bank wide) on legal
    requirements, new legal developments and best practices.

2. Effectively participate in a meeting, committee, taskforce and project of the Bank or the department to assist the Bank in identifying, assessing and managing its legal risks and protecting its interests; and

3. Provide support to Monetary Stability Unit of the Legal Department, contributing to its principal accountabilities as and when required.

QUALIFICATIONS & EXPERIENCE

Academic Qualifications: 

• Bachelor of Laws with Honours (LL.B. (Hons)).
   

Experience: 

• 2 to 5 years working experience (in the case of Kijang Graduate Analysts, at least 18 months experience) in rendering legal services as an in-house legal counsel in a statutory body, a corporate entity or the financial industry, or as a legal practitioner in the Judicial and Legal Service or private legal practice.
• Working experience with a financial regulatory authority or in a data privacy and protection related role is an added advantage.
   

TECHNICAL SKILLS/ KNOWLEDGE

• Intermediate to advanced level of knowledge on Malaysian legal system and common law approaches to statutory interpretation;
• Basic to intermediate level of knowledge on
  • laws relating to data protection and data privacy (including PDPA, GDPR, and laws relating to official secrets, confidentiality and data sharing);
  • powers, responsibilities, limitations and liabilities of a statutory body and regulatory authority;
  • regulatory laws administered and financial industry regulated by the Bank;
  • governance and corporate management;
  • enforcement; and
  • legal risks management
• Basic to intermediate level of skills on legal advisory, legal drafting, legal research, legal interpretation, leadership, analytical thinking, translating legal requirements into clear and practical procedures for organisational implementation and problem-solving;
• Basic to intermediate level of computer skills including Microsoft Outlook, Teams, Edge, Word and Power Point, and online legal databases (e.g. LexisNexis, Lawnet, CLJ).