Data Protection Officer

Data Protection Officer – Nawaloka Hospitals PLC

Job Title: Data Protection Officer (DPO) – Nawaloka Hospitals PLC

Job Category: HR & Administration, Healthcare & Nursing, Private Jobs

Job Location: Colombo, Sri Lanka

Job Overview

Nawaloka Hospitals PLC is seeking a qualified and ethical Data Protection Officer (DPO) to lead the organization’s data privacy and compliance initiatives. This role is responsible for ensuring compliance with Sri Lanka’s Personal Data Protection Act (PDPA) while safeguarding patient, employee, and organizational data. The ideal candidate will have a strong legal background, expertise in data privacy regulations, and the ability to advise senior management on compliance and governance matters.

Position Details

Position: Data Protection Officer (DPO)

Company: Nawaloka Hospitals PLC

Employment Type: Full-Time

Work Location: Head Office

Job Location: Colombo, Sri Lanka

Industry: Healthcare

Job Category: HR & Administration, Healthcare & Nursing, Private Jobs

Company Overview

Nawaloka Hospitals PLC is one of Sri Lanka’s leading private healthcare providers, renowned for delivering high-quality healthcare services through advanced medical technology, experienced professionals, and patient-centered care. The organization is committed to maintaining the highest standards of governance, regulatory compliance, and data security while providing exceptional healthcare services.

Qualifications & Experience

• Attorney-at-Law of the Supreme Court of Sri Lanka with active professional standing.
• LL.B Degree from a recognized university or successful completion of Sri Lanka Law College examinations.
• Minimum of 3–5 years of post-qualification experience in corporate legal practice, regulatory compliance, data privacy, or a reputed law firm.
• Strong knowledge of the Personal Data Protection Act (PDPA) and related regulations in Sri Lanka.
• Excellent legal drafting, analytical, negotiation, and stakeholder management skills.
• Ability to independently advise senior management on compliance and data privacy matters.
• Strong attention to detail and ability to handle confidential information.
• Experience in privacy governance, compliance frameworks, or risk management will be an added advantage.

Key Responsibilities

• Develop and manage the organization’s Data Protection Management Programme (DPMP).
• Ensure compliance with the Personal Data Protection Act (PDPA) and related regulations.
• Conduct Data Protection Impact Assessments (DPIAs) and privacy risk assessments.
• Advise management on data privacy, governance, and regulatory compliance.
• Manage data subject requests and coordinate data breach response processes.
• Review contracts, vendor agreements, and data processing arrangements.
• Maintain Records of Processing Activities (ROPA).
• Liaise with the Data Protection Authority of Sri Lanka.
• Conduct privacy awareness programmes and staff training sessions.

Required Skills

• Strong knowledge of data protection laws and regulatory compliance.
• Excellent legal drafting and documentation skills.
• Strong analytical and problem-solving abilities.
• Effective communication and stakeholder management skills.
• High level of integrity and confidentiality.
• Strong organizational and project management skills.
• Ability to work independently and make sound compliance decisions.
• Excellent presentation and training facilitation skills.

Salary & Benefits

• Attractive remuneration package based on qualifications and experience.
• Opportunity to work with one of Sri Lanka’s leading private healthcare institutions.
• Professional career development opportunities.
• Exposure to enterprise-level data privacy and compliance management.
• Supportive and collaborative working environment.
• Additional employee benefits in accordance with company policies.

How to Apply

Interested candidates should submit their updated CV to:

Email: recruitment@nawaloka.com

Please mention “Application for the Post of Data Protection Officer (DPO)” in the email subject line.

Important Notes

• This is a full-time position based in Colombo, Sri Lanka.
• Applicants should have a legal background with experience in data privacy, regulatory compliance, or corporate legal practice.
• Knowledge of Sri Lanka’s Personal Data Protection Act (PDPA) is essential.
• Only shortlisted candidates will be contacted for the recruitment process.
• Ensure your application includes your updated CV, educational qualifications, professional credentials, and relevant work experience.