APAC Privacy Program Manager

ETS is a global education and talent solutions organization enabling lifelong learners worldwide to be future-ready. For more than 75 years, we've been advancing the science of measurement to build benchmarks for fair and valid skill assessment across cultures and borders. Our worldwide impact extends through our renowned assessments including TOEFL, TOEIC, GRE and Praxis tests, serving millions of learners in more than 200 countries and territories.

Through strategic acquisitions, we've expanded our global capabilities: PSI strengthens our workforce assessment solutions, while Edusoft, Kira Talent, Pipplet, Vericant, and Wheebox enhance our educational technology and assessment platforms across critical markets worldwide. Through ETS Research Institute and ETS Solutions, we're partnering with educational institutions, governments, and organizations globally to promote skill proficiency, empower upward mobility, and unlock opportunities for everyone, everywhere.

With offices and partners across Asia, Europe, the Middle East, Africa, and the Americas, we deliver nearly 50 million tests annually. Join us in our journey of measuring progress to power human progress worldwide.

The Privacy Operations Manager will support the Global Chief Compliance Officer in enhancing and localizing the ETS Global Privacy Program for China and the Asia-Pacific region. This role is responsible for operationalizing the requirements of ETS's Privacy Policy and Privacy Statement while ensuring alignment with Chinese privacy laws such as the Personal Information Protection Law (PIPL), Cybersecurity Law, and Data Security Law, along with applicable global standards (e.g., GDPR, ISO 27701).

This role's annual package ranges from CNY
390,000 to CNY
520,000. The ideal candidate will lead cross-functional collaboration to embed privacy practices into ETS's daily operations across business units, with a particular focus on compliance within the China market.

• Review, adapt, and maintain internal standards, procedures, and business rules to operationalize ETS's Privacy Policy and Privacy Notice in compliance with Chinese laws and global best practices.
• Manage the Personal Information Rights Request (Data Subject Request) process and support internal escalations, ensuring timely and compliant resolution.
• Conduct Privacy Impact Assessments and conduct or direct similar privacy and security assessments.
• Maintain and regularly update records of processing activities, especially in relation to cross-border data transfers.
• Support the creation and upkeep of data flow diagrams and technology/data processing maps.
• Deliver privacy training and awareness initiatives to teams and stakeholders across the region.
• Participate in or lead internal privacy audits, monitoring, and control testing initiatives.
• Support response efforts to Chinese regulatory authorities and consumer complaints, in coordination with Legal and local management.
• Maintain strong working knowledge of applicable Chinese privacy regulations, significant regional (Korea and India) and global privacy standards, advising the business on local implementation.
• Provide legal support in reviewing, drafting, and negotiating commercial agreements (e.g., data processing agreements, vendor contracts, service agreements), ensuring alignment with data privacy and compliance requirements.

• Strong interpersonal and communication skills to advise and influence across business levels, including senior management in a multicultural setting.
• In-depth understanding of China's data protection laws (PIPL, DSL, CSL) and working knowledge of international privacy frameworks (e.g., GDPR). Willingness to gain expertise in regional privacy laws is expected.
• Hands-on knowledge of privacy and data protection operational practices, including technical and procedural safeguards.
• Project management skills with the ability to lead or support multiple initiatives simultaneously.
• High attention to detail and ability to interpret complex regulatory language into business requirements.
• Analytical and data-literate, with proficiency in Microsoft Excel, PowerPoint, SharePoint, and other collaboration tools.
• Ability to work effectively in both English and Mandarin (fluency in both languages required).

• Bachelor's degree or equivalent (in Law, Information Security, or related field).
• 3-5 years of direct experience in privacy program management, data protection, or…