Manager, Data Protection (Corporate and Personal Data)

The Hong Kong Applied Science and Technology Research Institute (ASTRI) was founded by the Government of the Hong Kong Special Administrative Region in 2000 with the mission of enhancing Hong Kong’s competitiveness through applied research. ASTRI’s core R&D competence in various areas is grouped under five Technology Divisions: Communications Technologies, Artificial Intelligence and Trust Technologies, Advanced Electronic Components and Systems, IoT Sensing and AI Technologies, and Innovative Mind.

It is applied across six core areas which are Smart City, Financial Technologies, New Industrialisation and Intelligent Manufacturing, Digital Health, Application Specific Integrated Circuits, and Metaverse.

Over the years, ASTRI has nurtured a pool of research, I&T talents and received numerous international awards for its pioneering innovations as well as outstanding business and community contributions.

To date, ASTRI has transferred almost 1500 technologies to the industries and been granted more than 1100 patents in the Mainland, the US, and other countries.

To support our constant endeavour to position Hong Kong as a world-class smart city and an international hub of innovation and technology, we are seeking qualified professionals to fill the following position(s):

Job Responsibilities:
• Assist the Head of Operations and Industry Engagement
• Act as the focal contact point within ASTRI for any matters related to handling, storing, and processing sensitive information and confidential data
• Collaborate with user departments to maintain the data inventory, classification, and data life cycle within the organization
• Foster a culture of respecting and protecting personal data privacy through training, updates, and reminders to users about the importance of data protection and privacy controls
• Ensure that all aspects of ASTRI’s policies and practices comply with applicable laws and regulations, including but not limited to HK PDPO, China cybersecurity regulations, EU GDPR, and China PIPL etc., with the formation and ongoing review of appropriate risk assessment tools
• Maintain up-to-date knowledge of data protection laws and regulations, and provide professional advice to Senior Management and internal departments on data privacy best practices, keeping the company informed of any changes that may impact data privacy practices
• Define and maintain a data governance framework and data inventory to monitor data access and usage, and improve visibility and control
• Develop and implement ISO-standard data classification, data protection, and privacy policies and procedures, to protect sensitive data, detect and block suspicious activity
• Take the lead on the ongoing assessment of data breach incident handling guidelines and coordinate the handling of data breach incidents, including investigations and making recommendations for improvement if necessary
• Perform any other duties assigned by the supervisor

Job Requirements:
• Degree holder or above in Information Technology, Law, Business, or other related disciplines
• Minimum of 6 years’ experience in a similar role, previous experiences in consulting firms or supervisory authorities are welcome. Candidates with less experience may also be considered
• Implementation experience of Privacy Management Programme (PMP) is highly preferred
• Knowledge of Hong Kong/China data protection law/ regulations and ability to translate into operational implications
• Holder of data protection/information privacy related certification such as IAPP, CIPP, CIPM, etc. would be an advantage
• Possess information security-related certifications, such as CISSP, Security+, CISA, etc., would also be an advantage
• Knowledge of data lifecycle management technology preferable
• Excellent interpersonal verbal and written communication and presentation skills
• Good command of spoken and written English and Chinese (Putonghua and Cantonese) is a must
• Organized and self-motivated team player who is able to work under pressure, and attentive to details
• Live ASTRI values

The appointment will be on renewable contract terms with a competitive salary and performance-linked variable pay. Fringe benefits include paid leave, medical, insurance coverage and contribution to MPF. The incumbent will normally work a five-day week.

For interested parties, please submit your application with detailed CV within two weeks of the post date. Applicants are encouraged to submit their applications as soon as possible. The review of applications will continue until the post is filled.

The resume should not include any sensitive personal information such as ID card no. or passport number, photo, etc.

Position offer is subject to the applicant’s experience and academic qualification. Only short-listed candidates will be notified. ASTRI reserves the right not to fill the position.

ASTRI is an Equal Opportunities Employer. Personal data provided by job applicants will be used exclusively for recruitment only. For details, please refer to ASTRI Privacy Policy Statement.