Data Privacy Executive

Job Summary:

The Data Privacy Executive is responsible for ensuring that all customer and employee's data is protected in compliance with data protection law. He/she helps improve the management of potentially sensitive information, carry out regular internal security audits, and act as the main point of contact between the company and the data protection authorities/LGUs. With excellent organizational, communication, and management skills, and also capable of leading training sessions and workshops with the management team or employees. To work independently in this role but also to communicate with all relevant employees as the company promotes a culture of data protection compliance within the organization.

Main Duties and Responsibilities:

• Provide expert advice and educate employees on important data compliance requirements
• Review contract and other pertaining documents based on Data Protection rules and regulations
• Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders
• Hold training with employees across different business units who are involved in data handling or processing
• Proactively conduct audits to ensure compliance and address potential issues
• Maintain records of all data processing activities carried out by the company
• Serve as the point of contact between the company and the data protection authorities/LGUs

Qualifications:

• Minimum of three years' experience working in data protection compliance or a related field or paralegal
• Knowledge of Philippines data protection laws and practices including an understanding of the PAGCOR
• Experience within a legal, audit, and/or risk function department
• Strong project management skills
• Ability to work well under pressure and manage sensitive and confidential information
• Excellent verbal and written communication skills, with strong attention to detail
• Great interpersonal skills and ability to work well both independently and as part of a team
• Knowledge of data processing operations in the company is an advantage
• Knowledge of computer security systems
• Ethical, with the ability to remain impartial and report all non-compliances
• Bachelor’s degree in Political Science, Legal Studies, Information Technology / Security, or a similar field. Alternatively, a bachelor’s degree or equivalent work experience in a private company, compliance, security, auditing, or a related field will often be considered.
• Proficient in Microsoft Office Suite or related writing and presentation software
• Certified Data Protection Officer (CDPO) / Certified Information Systems Security Professional (CISSP) / Certified Information Privacy Manager (CIPM) / Certified Data Privacy Compliance Officer (CDPCO) / ISO 27001 Lead Auditor