Get to Know our Team:

In the age of technology, things are constantly changing. The travel market is much the same, being more dynamic and complex than ever. Agoda's Legal team is well suited to take on the challenges presented, adopting a proactive mindset to tackle challenges and solve problems. We are quick on our feet, decisive, and collaborate with multiple departments. We hire out-of-the-box thinkers that are well grounded with ethics and legal knowledge to ensure that Agoda achieves the right results, the right way.

In this Role, you'll get to provide:

• Product Counseling: End-to-end legal advisory support on privacy, AI and data protection matters as they relate to Agoda's fintech products, interests and payment initiatives in Asia, United Kingdom and the United States.
• Regulatory Compliance: Monitor, interpret and implement global privacy and payment regulations and guidance as they may apply to fintech and payment operations (e.g. EU GDPR, UK GDPR and Data (Use and Access Act), CCPA, PDPA, PIPA, APPI, GLBA, PSD2).
• Privacy by Design: Collaborate cross-functionally with Product, Tech, Security, Finance, and Fintech commercial teams, as well as with other functions and brands in the Booking Holdings group, to embed privacy-by-design and compliance principles throughout product and data lifecycles. Lead and support privacy impact assessments, and data mapping exercises.
• Vendor and Partner Management: Assess third-party privacy and AI risks. Negotiate and review privacy, data protection and AI terms in contracts with payment service providers, tech service providers, and fintech partners.
• Regulatory Engagement: Support regulatory applications, filings, audits and responses to data protection authorities or financial regulatory authorities in relevant jurisdictions.
• Stakeholder Engagement: Serve as privacy subject matter expert for Fintech, advising on data subject rights, marketing and e-privacy compliance, and regulatory change implementation.
• Policy and Documentation: Draft and maintain privacy notices, policies, internal documentation, contribute to knowledge management, template development, and continuous improvement of privacy processes.

What you'll Need to Succeed:

• Law degree from a top law school, and excellent academic credentials.
• Minimum 6+ years of post-qualification experience, with at least 2 years at a reputable law firm.
• Demonstrated experience advising on privacy in the fintech, payments or financial services sector.
• Good knowledge of global privacy laws and payment regulations (GDPR, CCPA, PDPA, PIPA, APPI, PSD2).
• Excellent drafting, negotiation, communication and stakeholder management skills; able to work independently and collaboratively in a fast-paced, matrixed environment.
• Self-starter with a sense of humor, adaptability, and enthusiasm for building new products and processes.

It's Great if you have:

• Legally qualified in either England, Singapore or another common law jurisdiction.
• A data privacy qualification, CIPP or equivalent or at least willing to obtain one shortly after joining the company
• Practical, solution-oriented approach to legal advice.
• Experience working in a tech company or with technology-driven products.