Data Privacy Officer

Job Summary

We are seeking a detail-oriented and proactive Data Privacy Officer (DPO) to oversee our data protection strategy and ensure the organization remains compliant with the Data Privacy Act of 2012 (RA 10173) and international privacy standards, including GDPR and CCPA.

In this mid-level role, you will act as the bridge between our technical operations and regulatory requirements, ensuring that sensitive financial and personal data belonging to our global clients and local depositors are handled with the highest level of integrity.

Key Responsibilities1. Compliance Oversight

• Monitor the organization's compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and all relevant National Privacy Commission (NPC) circulars and issuances.
• Ensure privacy policies, procedures, and practices remain aligned with applicable regulatory requirements.

2. Privacy Impact Assessments (PIA)

• Lead Privacy Impact Assessments (PIAs) for new bank products, BPO workflows, technology solutions, and third-party vendor integrations.
• Identify, assess, and recommend appropriate measures to mitigate privacy risks.

3. Incident Management

• Serve as the primary lead for the Data Breach Response Team.
• Coordinate the organization's response to data privacy incidents and breaches.
• Ensure timely notification to the NPC and affected data subjects, when required.

4. Policy Development

• Draft, review, and update Privacy Manuals, Consent Forms, Data Sharing Agreements (DSAs), and other privacy-related policies and documentation.
• Develop privacy requirements tailored to cross-border BPO data transfers, banking operations, and applicable banking secrecy laws.

5. Training & Awareness

• Conduct regular privacy awareness and training sessions for employees.
• Promote Privacy by Design principles, particularly within customer service, financial processing, and other data-intensive operations.

6. Regulatory Liaison

• Act as the organization's primary point of contact with the National Privacy Commission (NPC).
• Manage and coordinate Data Subject Requests (DSRs) and ensure they are handled in accordance with applicable privacy regulations.

QualificationsExperience

• 3–5 years of dedicated experience in Data Privacy, Compliance, Information Security, or a related field.
• Proven experience in the Banking/FinTech or BPO/IT-BPM sectors is mandatory.

Industry Expertise

Banking:

• Familiarity with Bangko Sentral ng Pilipinas (BSP) regulations related to data governance, information security, and consumer protection.

BPO/IT-BPM:

• Experience managing cross-border data flows.
• Familiarity with client-specific privacy requirements and Master Service Agreements (MSAs).

Education

• Bachelor's degree in Law, Information Technology, Business Administration, or a related field.

Certifications — Preferred

• NPC DPO ACE Level 1 or Level 2
• IAPP CIPP/E
• IAPP CIPM
• IAPP CIPT

Technical Skills

• Strong understanding of IT infrastructure and information security principles.
• Knowledge of encryption standards and data security controls.
• Strong understanding of data lifecycle management.
• Ability to translate technical and operational processes into practical privacy and compliance requirements.

Why Join Us?

• Competitive salary package in the heart of Pasig's business district.
• Exposure to complex, large-scale data processing environments.
• Opportunity to work with global clients and local financial institutions.
• Clear career progression toward Senior DPO or Chief Privacy Officer (CPO) roles.

Pay: Php60,000.00 - Php75,000.00 per month

Benefits:

• Promotion to permanent employee

Work Location: In person