Senior Manager, Data Protection and Governance

Company description:

The National Healthcare Group (NHG) is a leader in public healthcare in Singapore, recognised at home and abroad for the quality of its medical expertise and facilities. Care is provided through an integrated network of seven primary care polyclinics, acute care and tertiary hospitals, national specialty centres and business divisions. Together they bring a rich legacy of medical expertise to our philosophy of integrated patient-centred care.

NHG's vision is "Adding Years of Healthy Life". This vision goes beyond merely healing the sick to the more difficult and infinitely more rewarding task of preventing illness and preserving health and quality of life. With some 22,000 staff, NHG aims to provide care that is patient-centric, accessible, seamless, comprehensive, appropriate and cost-effective.

As the Regional Health System (RHS) for Central-North Singapore, it is vital for NHG to partner and collaborate with stakeholders, community advisors, and voluntary welfare organisations. Together with our patients, their families and caregivers, we aim to deliver integrated healthcare services and programmes that help in Adding Years of Healthy Life to all concerned.

Job description:

STATEMENT OF PURPOSE

You will be part of the Group Digital Health team, supporting Data Protection and Governance, and planning functions for NHG Health. You will be supporting in driving digital health innovation through strategic commercial partnerships by identifying, negotiating, and managing collaborative agreements with technology providers and healthcare establishments. This role is instrumental in advancing NHG's digital transformation agenda through co-development and pilot programs for fulfilling our strategic priorities.

MAJOR DUTIES AND RESPONSIBILITIES

1. Reviewing and updating the data protection policy and framework in NHG, considering various standards for data governance in healthcare context (e.g. Personal Data Protection Act (PDPA), MOH's HealthTech Instruction Manuals (HIM)).

2. Collaborating with NHG institutions on the implementation of the data protection policy and framework as well as data incident reporting procedures.

3. Establish and communicate the NHG's data protection objectives and direction effectively to all NHG's units and functions.

4. • Promote a positive data protection and privacy culture within NHG through proper training and awareness programme.

5. Work with NHG's units and functions to proactively implement the appropriate data protection and data security policies and procedures.

6. Act as the data protection advisor to NHG's units and functions and promote data protection risk awareness and accountability amongst Management and Staff in the units and functions.

7. Assisting the Data Protection Officer (DPO) Committee in reviewing, evaluating and making recommendations on all matters related to data protection.

8. Preparing reports for Data Protection Officer Committee and Senior Management team.

9. Participate in relevant data protection and governance subcommittees or discussions.
10. Liaising with data protection leads in risk monitoring and reporting.

11. Report regularly to the senior management on data breach incidents to address data protection risks by minimising the effects of threats and implementing action plans to mitigate risks to an acceptable level.

12. Managing the data protection training program.

13. To oversee the development and maintenance of an up-to-date data protection training program for employees of NHG.

14. To work with NHG's units and functions to ensure that all employees are provided with relevant and timely training in data protection.

15. To ensure the content of the training program remains current and relevant.

16. Reviewing and analysing data protection risk registers and risk statistics.

17. To review the internal controls in data handling areas and develop appropriate risk mitigation plans to mitigate the risks (e.g. via the use of Privacy Enhancing Technology (PETs)).

18. To facilitate the preparation and update the risk registers (and relevant risk reports containing risk indicators) which identify and assess the key data breach risks facing NHG's units and functions

19. Performing compliance checks on data protection and data security in accordance with PDPA and MOH's HIM policy requirements

20. Managing Strategic Partnership Development

21. Identify and evaluate potential technology partners, healthcare establishments, and innovation partners aligned with NHG's digital health strategy

22. Conduct market research and due diligence on emerging digital health technologies and potential collaboration opportunities
23. Develop partnership strategies and business cases for digital health innovation initiatives

24. Establish and maintain a pipeline active partnership annually for co-development or pilot programs

25. Managing Commercial Agreement Management

26. Lead the review, drafting, and negotiation of commercial partnership agreements, including joint development agreements, pilot agreements, and technology licensing arrangements

27. Collaborate with legal, procurement, and compliance teams to ensure agreements meet regulatory and organizational requirements
28. Structure partnership terms including intellectual property arrangements, revenue sharing, risk allocation, and performance metrics

29. Manage contract lifecycle from initiation through execution and renewal

30. Managing Stakeholder Management

31. Present partnership opportunities and progress to senior leadership and governance committees

32. Maintain relationships with external partners and internal stakeholders
33. Represent NHG at industry events, conferences, and partnership forums

OTHER DUTIES AND RESPONSIBILITIES

1. Any other administrative duties and responsibilities that may be assigned from time-to-time in the areas of Group Digital Health matters.