We are seeking a detail-oriented and proactive Data Privacy Officer (DPO) to oversee our data protection strategy and ensure the organization remains compliant with the Data Privacy Act of 2012 (RA 10173) and international standards (GDPR/CCPA).
In this mid-level role, you will act as the bridge between our technical operations and regulatory requirements, ensuring that the sensitive financial and personal data of our global clients and local depositors are handled with the highest level of integrity.
Key Responsibilities
- Compliance Oversight: Monitor the organization's compliance with the DPA, its IRR, and all relevant NPC circulars.
- Privacy Impact Assessments (PIA): Lead PIAs for new bank products, BPO workflows, and third-party vendor integrations to identify and mitigate privacy risks.
- Incident Management: Serve as the primary lead for the Data Breach Response Team, ensuring timely notification to the NPC and affected data subjects.
- Policy Development: Draft and update Privacy Manuals, Consent Forms, and Data Sharing Agreements (DSAs) tailored to cross-border BPO transfers or banking secrecy laws.
- Training & Awareness: Conduct regular privacy sessions for employees, specifically focusing on "Privacy by Design" in customer service and financial processing.
- Regulatory Liaison: Act as the main point of contact for the National Privacy Commission and handle Data Subject Requests (DSRs).
Qualifications
- Experience: 3–5 years of dedicated experience in Data Privacy, Compliance, or Information Security.
- Industry Expertise: Proven track record in the Banking/FinTech or BPO/IT-BPM sectors is mandatory.
- Banking: Familiarity with BSP (Bangko Sentral ng Pilipinas) regulations on data governance and consumer protection.
- BPO: Experience managing cross-border data flows and client-specific privacy Master Service Agreements (MSAs).
- Education: Bachelor’s degree in Law, Information Technology, Business Administration, or a related field.
- Certifications (Preferred): * NPC DPO ACE Level 1 or 2.
- IAPP Certifications (CIPP/E, CIPM, or CIPT).
- Technical Skills: Strong understanding of IT infrastructure, encryption standards, and data lifecycle management.