Compliance Manager / Data Protection Officer

OUR CARE VALUES

Hoan My is guided by our CARE values: Commitment to Quality Care, Accountability for Outcomes, Respect for Our Communities, and Empathy with Our Patients. These principles shape how we work and how we treat one another. We seek people who put these values into practice and show excellence, innovation, and integrity in their work.

---

JOB SUMMARY

Compliance Manager oversees the compliance program for assigned regional business units within Hoan My Group, ensuring effective risk management, ethical business practices and adherence to company policies and applicable regulations.

The role also serves as Group's designated Data Protection Officer (DPO), leading and coordinating the implementation of the Group’s personal data protection framework and ensuring compliance with applicable data protection requirements.

---

MAIN RESPONSIBILITIES

1. Compliance & Risk

• Lead compliance initiatives across assigned hospitals and clinics.
• Identify and assess compliance and operational risks, and implement prevention, detection and corrective actions.
• Strengthen internal controls and promote a strong compliance and ethical culture.

2. Whistleblowing, COI & Compliance Training

• Oversee investigations and resolution of non-compliance and whistleblowing cases.
• Conduct employee and vendor Conflict of Interest (COI) checks and risk assessments.
• Deliver compliance training and counseling on anti-corruption, applicable laws and healthcare standards.

3. Data Protection / DPO – Key Focus

• Serve as HMC’s Data Protection Officer (DPO) and coordinate Group-wide implementation of the personal data protection framework.
• Coordinate with BU DPOs and relevant functions to implement data protection policies, procedures and controls.
• Oversee regulatory requirements and submissions, including Data Protection Impact Assessment (DPIA) and Data Transfer Impact Assessment (DTIA), and monitor compliance across the Group.
• Coordinate key data protection activities, including consent management, data subject requests, data sharing, data incidents and training.
• Act as the key coordination point with authorities, external advisers and service providers; escalate material data protection risks and non-compliance to management.
• Coordinate with Legal on matters requiring legal interpretation or advice.

• 5+ years of experience in healthcare audit, risk, compliance, data protection or privacy compliance.
• Bachelor’s degree in Law, Finance, Accounting, Business Administration, IT, Information Security or a related discipline.
• Strong knowledge of risk assessment and internal control frameworks.
• Experience in personal data protection, privacy compliance or fraud investigation is preferred.
• Professional training or certification in data protection, privacy, cybersecurity or information governance is an advantage.
• Strong analytical, judgement and problem-solving skills.
• Strong stakeholder management, influencing and communication skills.
• Ability to develop and implement policies and processes.
• Good command of English and Vietnamese.
• Willingness to travel or relocate to regional business units.

---

Thank you for your interest in career opportunities at Hoan My Medical Corporation. Candidates whose qualifications match our hiring requirements will be contacted within 14 days for the interview process. We appreciate your interest in joining Hoan My Medical Corporation. If you are not selected for this role, your application will remain in our candidate database for consideration for future opportunities.