Overview
Executive – Data Protection Jobs in Colombo, Western Province, Sri Lanka at Hemas Hospitals Sri Lanka
Title: Executive – Data Protection
Company: Hemas Hospitals Sri Lanka
Location: Colombo, Western Province, Sri Lanka
Company Description Hemas Hospitals is the fastest growing hospital chain in Sri Lanka and the first to receive patient- and process-led international accreditation from the Australian Council for Health Standards International (ACHSI), setting a benchmark for quality and patient safety in the country. The organization is committed to excellence in patient care, delivering strong clinical outcomes with a focus on safety and hospitality for every visitor. As a multi-specialty hospital chain offering a wide range of medical services, including specialized tertiary care, Hemas Hospitals aims to provide high-quality, value-for-money healthcare. The group operates three hospitals and a network of fully fledged laboratories across Sri Lanka, bringing quality healthcare closer to local communities. Team members join a culture that prioritizes continuous improvement, professional integrity, and patient-centered service.
Role Description The Executive – Data Protection is a full-time, on-site role based in Colombo, responsible for supporting and enforcing data protection and privacy practices across Hemas Hospitals. The role involves monitoring compliance with applicable data protection laws, internal policies, and industry standards, as well as assisting with the development and updating of data protection guidelines, procedures, and training materials. The Executive will help conduct privacy impact assessments, maintain records of processing activities, and coordinate responses to data-related incidents, including reporting, investigation, and corrective actions. Daily tasks include collaborating with clinical, administrative, IT, and legal teams to ensure secure handling of patient and operational data, reviewing data-sharing arrangements, and supporting audits and documentation. The role also includes raising awareness among staff on data protection best practices and contributing to continuous enhancement of information governance and patient confidentiality.
Qualifications
- Knowledge of data protection and privacy regulations (e.g., local health data laws, international best practices) and ability to apply them in a healthcare setting.
- Experience with information security and data governance, including secure data handling, access control, and incident management.
- Strong analytical and documentation skills, with the ability to perform risk assessments, maintain compliance records, and prepare reports for management.
- Effective communication and stakeholder management skills to work with multidisciplinary teams and deliver training or awareness sessions.
- Relevant academic background such as a degree or diploma in Information Technology, Law, Health Information Management, Compliance, or a related field.
- Prior experience in data protection, compliance, or information security, preferably within healthcare or a similarly regulated environment.
- High level of integrity, attention to detail, and commitment to maintaining patient confidentiality and organizational trust.
- Ability to work on-site in Colombo, manage multiple priorities, and adapt to evolving
