Data Protection Officer – Nawaloka Hospitals PLC
Job Overview
Nawaloka Hospitals PLC is seeking a motivated, detail-oriented, and proactive professional for the position of Data Protection Officer (DPO) in Colombo, Sri Lanka. The successful candidate will help establish data governance standards, strengthen patient privacy practices, and support compliance with Sri Lanka’s Personal Data Protection Act (PDPA) No. 9 of 2022.
Position Details
- Job Title: Data Protection Officer (DPO)
- Company Name: Nawaloka Hospitals PLC
- Job Location: Colombo, Sri Lanka
- Job Category: Legal / Compliance / Information Technology / Data Protection
- Employment Type: Full-time
- Work Arrangement: On-site
- Application Email: recruitment@nawaloka.com
- Application Deadline: Not specified in the advertisement
Company Overview
Nawaloka Hospitals PLC is a leading private healthcare institution in Sri Lanka. The organisation emphasises patient privacy, responsible data handling, and compliance with applicable data protection requirements.
Qualifications & Experience
- A degree or formal qualification in Law (LL.B.), Information Technology, Management, Cyber Security, or a related field.
- Previous experience in data privacy is not mandatory.
- Ability to learn, research, and understand complex regulatory guidelines quickly.
- Excellent organisational skills and a structured, detail-oriented approach.
- Strong written and verbal communication skills to coordinate with different hospital departments.
- Candidates with backgrounds in corporate compliance, legal auditing, quality assurance, or IT support are strongly encouraged to apply.
Key Responsibilities
- Learn and implement the requirements of Sri Lanka’s Personal Data Protection Act (PDPA) in day-to-day hospital operations.
- Work on-site with administrative, medical, and IT teams to oversee the handling of physical and electronic patient records, pharmacy systems, and operational data.
- Assist in developing clear privacy guidelines, staff procedures, and patient consent forms.
- Act as an internal contact for data protection compliance matters and future interactions with the Data Protection Authority (DPA).
- Help train hospital staff, administrative officers, and department leads on appropriate data handling and privacy practices.
- Support the establishment and maintenance of data governance standards across the organisation.
- Help identify data privacy risks and promote responsible handling of confidential information.
Required Skills
- Knowledge of data protection, privacy, and regulatory compliance principles, or the ability to learn them quickly.
- Strong research and analytical skills.
- Excellent written and verbal communication.
- Effective coordination and organisational abilities.
- High attention to detail.
- Ability to handle confidential information responsibly.
- Willingness to work collaboratively with multidisciplinary teams.
Salary & Benefits
The advertisement does not specify the salary or benefits package. Further details may be provided during the recruitment process.
How to Apply
Interested candidates should email their CV along with a brief cover letter explaining their ability to learn quickly and their relevant skills to:
Email: recruitment@nawaloka.com
Important: Mention “DATA PROTECTION OFFICER (DPO)” in the email subject line.
Important Notes
- The position requires full-time, on-site work at the Colombo office.
- Previous data privacy experience is not compulsory.
- Applicants from legal, compliance, quality assurance, management, cybersecurity, and IT backgrounds are encouraged to apply.
- The application deadline is not specified in the advertisement.
- Only applicants who meet the organisation’s selection criteria may be contacted.
