Compliance Officer - Data Privacy

Working closely with the Data Protection Officer, this role contributes to the implementation, monitoring, and continuous improvement of the company’s privacy governance and data protection framework across all business units.

• Support the implementation and day‑to‑day compliance of the organization's privacy program in line with the Philippine Data Privacy Act (RA 10173) and guidance from the National Privacy Commission.
• Assist the Data Protection Officer (DPO) in maintaining and strengthening the organization’s privacy governance framework.
• Maintain core privacy documentation, including PIAs, ROPAs, DPAs, DSAs, consent forms, and privacy notices.
• Monitor personal data processing activities to ensure compliance with regulatory and internal requirements.
• Support the application of privacy‑by‑design and privacy‑by‑default principles across systems, processes, and initiatives.
• Assist in developing and updating privacy policies, procedures, and internal guidelines.
• Ensure privacy records and documentation are audit‑ready.
• Help identify, assess, and mitigate privacy risks related to personal and sensitive personal information.
• Support implementation of privacy controls aligned with best practices (e.g. GDPR awareness, ISO/IEC 27001 alignment).
• Participate in privacy audits, internal reviews, and regulatory readiness activities.
• Assist the DPO in managing privacy incidents, including investigation, documentation, and stakeholder coordination.
• Support preparation of regulatory notifications and reports when required.
• Work with IT, HR, Legal, Procurement, and Operations to embed privacy requirements into systems, vendor engagements, and operations.
• Maintain registers of data processing activities, third‑party processors, and data sharing arrangements.
• Prepare privacy compliance reports and summaries for management and governance forums.
• Support regulatory submissions and documentation to the National Privacy Commission, as applicable.

Qualifications:

• 1–3 years' experience in data privacy, compliance, risk management, information security governance, or regulatory compliance roles.
• 1-2 years hands-on experience supporting compliance with the Republic Act No. 10173, including familiarity with regulatory guidance from the National Privacy Commission.
• Experience in developing and maintaining privacy compliance documentation such as: Privacy Impact Assessments (PIA), Records of Processing Activities (ROPA), Data Processing Agreements (DPA), Data Sharing Agreements (DSA), Privacy notices and consent documentation.
• Exposure to international privacy frameworks including the General Data Protection Regulation principles and cross-border data protection considerations preferred.
• Familiarity with information security governance frameworks such as ISO/IEC 27001 desirable.
• Experience coordinating privacy compliance activities with cross-functional teams such as IT, HR, Legal, and Operations.
• Experience supporting internal audits, compliance assessments, or regulatory reporting processes desirable.
• Strong documentation, reporting, and policy development capabilities preferred.