Legal Counsel

The Legal Counsel is responsible for safeguarding ISKL’s legal and regulatory integrity by providing strategic legal guidance, overseeing compliance with applicable laws, managing legal risk, and protecting the school’s interests. Working closely with the Director of Operations and senior leadership, the Legal Counsel plays a key role in developing and implementing legal frameworks, policies, and systems to mitigate liability across operational and academic domains.

This role also encompasses oversight of data protection and privacy compliance under Malaysia’s Personal Data Protection Act 2010 (PDPA) and relevant international standards. The Legal Counsel ensures ISKL’s personal data handling practices are lawful, ethical, and secure, and acts as the main liaison with data protection authorities.

KEY RESPONSIBILITIES include is but are not limited to:

Legal Advisory & Regulatory Compliance

Provides legal advice on a broad range of matters, including contracts, employment law, governance, regulatory obligations, and student/parent matters.

Oversees compliance with Malaysian laws and ISKL’s internal policies, including privacy and data protection requirements.

Identifies, assesses, and mitigates legal and data-related risks across the school’s operations.

Employment & Labor Law

Advises the Talent and Culture and HR team on all employment-related matters, including hiring, onboarding, disciplinary action, separation, and restructuring.

Leads or supports internal investigations on employment disputes or claims, such as whistleblowing, discrimination, or grievances.

Drafts and negotiates employment agreements and settlement documentation in line with legal best practices.

Contract Review & Negotiation

Drafts, reviews, and negotiates a range of legal documents such as commercial contracts, MOUs, service agreements, and confidentiality agreements.

Ensures all contracts adhere to ISKL’s risk management strategies and compliance requirements.

Maintains and updates a suite of standard templates to support operational consistency.

Data Protection & Privacy Compliance

Ensures ISKL’s compliance with PDPA and all relevant data privacy legislation.

Embeds privacy compliance into operational processes, contracts, and school systems.

Supports departments in conducting data protection impact assessments (DPIAs) and developing risk mitigation strategies.

Monitors compliance through audits, incident reviews, and reporting to senior leadership.

Leads responses to data breaches and privacy incidents, ensuring timely containment, remediation, and regulatory notification.

Serves as the main point of contact for data subjects and the Personal Data Protection Commissioner.

Represents ISKL in liaising with government authorities, legal bodies, and external stakeholders on legal matters.

Coordinates with external legal counsel for litigation and dispute resolution, ensuring ISKL’s interests are protected.

Manages dispute negotiations and supports pre-litigation strategy development.

Policy Development, Awareness & Training

Develops and maintains legal policies, procedures, and data protection protocols aligned with ISKL’s operational framework.

Provides training to staff on legal compliance, contract risk, data privacy, and regulatory updates.

Promotes a culture of accountability and data responsibility across all levels of the school.

PERSONAL ATTRIBUTES

Models ISKL’s values of empathy, care, respect, and high expectations in all interactions.

Operates with high ethical standards, discretion, and professionalism, especially when managing sensitive matters.

Culturally sensitive and respectful in a multinational environment.

Proactive, resilient, and adaptable with a strong service orientation and solution-focused mindset.

Role holders are expected to be fully committed and supportive of ISKL’s ongoing commitment to fostering, cultivating, and preserving ISKL’s Values by holding themselves accountable and by modeling this commitment in the execution of duties and responsibilities in ISKL.

This role profile describes the core output expected in this role and does not encompass a comprehensive list of specific tasks, temporary activities, or projects initiated as a result of changing contexts. Agility and a growth mindset are expected of all our employees.

(Closing date to receive applications: April 25, 2025)