Senior Data Protection Specialist (3 months FTC)

About Thunes:

Thunes is the Smart Superhighway to move money around the world. Thunes’ proprietary Direct Global Network allows Members to make payments in real-time in over 140 countries and more than 90 currencies. Thunes’ Network connects directly to over 12 billion mobile wallets, stablecoin wallets and bank accounts worldwide, as well as 15 billion cards via more than 220 different payment methods, such as GCash, M-Pesa, Airtel, MTN, Orange, JazzCash, Easypaisa, AliPay, WeChat Pay and many more. Thunes’ Direct Global Network differentiates itself through its worldwide reach, in-house SmartX Treasury System and Fortress Compliance Platform, ensuring Members of the Network receive unrivaled speed, control, visibility, protection, and cost efficiencies when making real-time payments, globally. Members of Thunes’ Direct Global Network include gig economy giants like Uber and Deliveroo, super-apps like Grab and WeChat, MTOs, fintechs, PSPs and banks. Headquartered in Singapore, Thunes has offices in 14 locations, including Barcelona, Beijing, Dubai, Hong Kong, Johannesburg, London, Manila, Nairobi, New York, Paris, Riyadh, San Francisco and Shanghai. For more information, visit: https://www.thunes.com/

Senior Data Protection Specialist (3-month fixed-term contract)  

Role Purpose

As a Senior Data Protection Specialist, you will provide immediate, high-impact operational support to deliver personal data protection controls and compliance at Thunes. This 3-month fixed-term contract focuses on accelerating key privacy deliverables, managing active workflows, and maintaining compliance frameworks.

You will collaborate with cross-functional teams to ensure the confidentiality, integrity, and availability of personal and sensitive data. This role is based in our Singapore or London office with the flexibility to work from home one day a week. Reporting directly to and working alongside the Data Protection Officer within the Legal and Compliance function, you will act as a key delivery partner to execute the DPO’s privacy strategy.

Key Responsibilities

• Take immediate ownership of driving and accelerating some aspects of our vendor data protection reviews to ensure robust third-party processing practices.
• Conduct efficient reviews of new technologies and projects to identify privacy risks, execute Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and Transfer Impact Assessments (TIAs) using OneTrust.
• Facilitate the execution of an organisation-wide data inventory and RoPA enhancement project leveraging the OneTrust platform.
• Manage the end-to-end operational workflow for Data Subject Access Requests (DSARs), Erasure requests, and other regulatory rights requests to ensure statutory deadlines are met.
• Deliver immediate, actionable data protection advice to business units, helping them navigate privacy risks during the contract term.

What We Are Looking For

Experience

• 4+ years of professional experience advising on data protection and privacy matters, with a proven ability to hit the ground running in a short-term contract. Experience within the international cross-border payments industry is highly desirable.
• Contract/Project Delivery: A proven track record of entering fast-paced global environments and immediately managing a varied workload with minimal onboarding.
• Regulatory Knowledge: Deep, current understanding of global data protection legislation and international data transfer requirements.
• Support with the review, negotiation, and drafting of Data Processing Agreements (DPAs) and privacy clauses in contracts, preparing them for final escalation and sign off.

Skills and Qualifications

• OneTrust Expertise: Advanced proficiency and hands-on experience using the OneTrust platform for data mapping, inventory, and assessments is essential.
• Highly self-motivated and capable of working independently from day one to drive projects to completion.
• Exceptional verbal and written communication skills with the ability to manage diverse stakeholder groups under tight deadlines.
• Detail-oriented with the agility to thrive immediately in a fast-paced, global fintech environment.

Qualifications

• Bachelor’s degree in law, compliance, IT, or a relevant field.
• CIPP/E, CIPM, or equivalent professional privacy certifications are preferred.