Data Protection Officer (DPO)

Data Protection Officer (DPO) – Arpico Insurance PLC

Job Overview

Arpico Insurance PLC is seeking a suitably qualified and experienced professional for the position of Data Protection Officer (DPO). The selected candidate will lead and strengthen the company’s Data Protection and Privacy function by developing effective privacy frameworks, ensuring regulatory compliance, managing data and privacy risks, safeguarding personal information, and promoting a strong data protection culture across the organization.

Position Details

• Job Title: Data Protection Officer (DPO)
• Company: Arpico Insurance PLC
• Job Location: Colombo, Sri Lanka
• Work Location: Colombo 02
• Employment Type: Full-Time
• Job Category: Banking & Insurance, IT & Software, HR & Administration, Private Jobs

Company Overview

Arpico Insurance PLC is a life insurance company in Sri Lanka and a subsidiary of Richard Pieris & Company PLC. The company provides a range of insurance solutions and operates within the regulatory framework applicable to the Sri Lankan insurance industry.

Qualifications & Experience

• Bachelor’s Degree in Law, Information Technology, Information Security, Risk Management, Business Administration, or a related discipline.
• Minimum 3–5 years of experience in Compliance, Risk Management, Information Security, Internal Audit, or Legal.
• Experience with data privacy or data governance is required.
• Strong knowledge of the Personal Data Protection Act, No. 9 of 2022 and data protection best practices.
• Professional certifications such as CIPP, CIPM, CISA, CISM, ISO 27001, or ISO 27701 will be an added advantage.
• Experience within the financial services or insurance industry will be an advantage.

Key Responsibilities

• Develop, implement, and oversee the company’s data protection framework.
• Ensure compliance with the Personal Data Protection Act and applicable regulatory requirements.
• Conduct Privacy Impact Assessments and privacy risk assessments.
• Manage data subject rights requests and personal data breach response processes.
• Maintain Records of Processing Activities (RoPA).
• Develop and review data protection policies and procedures.
• Deliver privacy awareness and training programmes across the organization.
• Liaise with regulators and provide privacy compliance advice to business units.
• Monitor third-party compliance with data protection requirements.
• Prepare reports for Senior Management and Board Committees.
• Support the organization in identifying and managing data privacy and protection risks.

Required Skills

• Strong knowledge of data protection and privacy principles.
• Understanding of the Personal Data Protection Act, No. 9 of 2022.
• Strong compliance and risk management skills.
• Excellent analytical and problem-solving abilities.
• Strong communication and stakeholder management skills.
• Ability to develop and implement privacy frameworks and policies.
• Strong documentation and reporting skills.
• Ability to manage data privacy risks and compliance requirements.
• Good understanding of data governance and information security practices.

Salary & Benefits

• Employment with an established insurance organization.
• Opportunity to lead the company’s Data Protection and Privacy function.
• Exposure to regulatory compliance, data governance, risk management, and information security.
• Professional development opportunities.

How to Apply

Interested candidates are invited to send their CV and portfolio to careers@arpico.com.

Important Notes

• Job Location: Colombo 02.
• Minimum 3–5 years of relevant experience is required.
• Candidates should have experience in Compliance, Risk Management, Information Security, Internal Audit, or Legal, with exposure to data privacy or data governance.
• Knowledge of the Personal Data Protection Act, No. 9 of 2022 is required.
• Professional certifications in privacy, information security, audit, or related areas will be an added advantage.
• Experience in the financial services or insurance industry is advantageous.