Data Privacy Supervisor

• Support the Data Protection Officer (DPO) in the implementation and monitoring of the Data Privacy Management Program.
• Conduct research, review, analyze, cross-check, and validate data privacy-related information and documentation.
• Prepare and maintain privacy reports, correspondence, forms, records, masterlists, and other DPO-related documents.
• Assist in reviewing and validating data privacy forms, consent forms, and other privacy-related documents.
• Monitor the DPO Asset Register, Privacy Impact Assessments (PIAs), risk assessments, and QOT objectives, targets, and plans.
• Support the implementation and monitoring of data privacy policies, procedures, practices, and controls.
• Assist in monitoring new and updated data privacy laws, regulations, and National Privacy Commission (NPC) issuances.
• Support Business Impact Analysis (BIA) and other privacy, risk, and compliance assessments.
• Maintain and update reference files, masterlists, records, and controlled documentation in accordance with DPO policies and guidelines.
• Serve as Document Controller for the Data Privacy Office, ensuring proper document version control and records management.
• Support the validation of ISMS and Data Privacy Awareness Assessments.
• Monitor data privacy requirements and documentation involving third parties, clients, vendors, processors, and affiliates.
• Coordinate with the DPO, process owners, Legal Office, Information Security, and other relevant stakeholders on privacy-related matters.
• Act as the primary message transfer agent for DPO requests and communications received through the official DPO mailbox.
• Support the DPO in information lifecycle management activities.
• Assist in monitoring the organization's data breach management and reporting program.
• Support privacy management initiatives, certification activities, audits, and other compliance requirements.
• Prepare and submit Document Review Reports, Masterlists of Records, and other periodic or ad hoc reports.
• Perform other related duties and responsibilities as assigned by the DPO or Management.

Qualifications

• Bachelor's degree in Data Privacy, Information Technology, Computer Science, Business Administration, Legal Management, Risk Management, Quality Management, or a related field.
• 2–4 years of relevant experience in Data Privacy, Compliance, Risk Management, Information Security, Quality Management, Document Control, or a related field.
• Knowledge of the Data Privacy Act of 2012 (RA 10173) and relevant National Privacy Commission (NPC) regulations and issuances.
• Knowledge of data privacy principles, information lifecycle management, privacy risk management, and compliance monitoring.
• Experience in privacy compliance, documentation, audit, risk assessment, regulatory monitoring, or controlled document management is preferred.
• Familiarity with Privacy Impact Assessments (PIA), Business Impact Analysis (BIA), ISO 27001/ISMS, Data Protection Agreements, and data breach management is an advantage.
• Experience coordinating with Legal, Compliance, Information Security, Quality, or other process owners is preferred.
• Strong research, analytical, validation, documentation, and records management skills.
• Excellent written and verbal communication and coordination skills.
• Highly organized, detail-oriented, and able to manage multiple activities and deadlines.
• Proficient in Microsoft Office applications, particularly Word, Excel, and PowerPoint.
• Ability to maintain strict confidentiality and appropriately handle sensitive and personal information.
• Certification or training in Data Privacy, Privacy Management, Information Security, ISO, or Compliance is an advantage.

What We're Looking For

We are looking for someone who is detail-oriented, organized, analytical, and highly conscious of confidentiality and regulatory requirements, with the ability to coordinate effectively with different business units and stakeholders.

Industry: Healthcare / HMO
Employment Type: Full-time
Experience Level: 2–4 years