🎓 Required Qualifications

• Attorney-at-Law of the Supreme Court of Sri Lanka with active professional standing.
• LL.B Degree from a recognized university or successful completion of Sri Lanka Law College examinations.
• Approximately 3–5+ years of post-qualification experience in corporate legal work, regulatory compliance, data privacy or a reputable law firm.
• Strong knowledge of the Personal Data Protection Act, No. 9 of 2022, its amendments including Act No. 22 of 2025, and related regulations.
• Excellent legal drafting, analytical, negotiation and stakeholder-management skills.
• High ethical standards and the ability to independently advise senior management on compliance and data-privacy matters.
• Strong attention to detail when handling confidential information and maintaining compliance documentation.

🛡️ Key Responsibilities

• Develop and manage the organization’s Data Protection Management Programme (DPMP).
• Ensure compliance with the Personal Data Protection Act (PDPA).
• Conduct Data Protection Impact Assessments (DPIAs) and privacy-risk assessments.
• Advise management on data privacy, governance and regulatory compliance.
• Manage data-subject requests and data-breach response processes.
• Review contracts, vendor agreements and data-processing arrangements.
• Maintain Records of Processing Activities (ROPA).
• Liaise with the Data Protection Authority of Sri Lanka.
• Conduct privacy-awareness and staff-training programmes.

📧 How to Apply

Eligible applicants should send their updated CV by email. Mention the following wording in the email subject line:

“Application for the Post of Data Protection Officer (DPO)”