Compliance Officer - Artificial Intelligence Compliance and Data Privacy

LOCATION: Main Office

REPORTING TO (ROLE):

Compliance Senior Manager - Data Privacy and Artificial Intelligence

NUMBER OF DIRECT REPORTS:

MAIN PURPOSE OF THE JOB:

Assists the Compliance Senior Manager in promoting and implementing regulatory and AXA Group requirements on Privacy and Artificial Intelligence

KEY ACCOUNTABILITIES:

Assist the Compliance Senior Manager and DPO on various main tasks related to Data Privacy and Artificial Intelligence:

1. Governance and Regulatory Compliance

• Support in meeting regulatory and reportorial requirements of the National Privacy Commission and other relevant regulators.
• Assist in implementing and maintain the Company’s Privacy and AI Governance Framework, ensuring alignment with AXA Group standards and local requirements.
• Disseminate and help operationalize Privacy and AI Compliance policies, standards, and guidelines.
• Monitor the DPO mailbox and other official channels for regulatory and stakeholder communications, ensuring timely triage and escalation, including but not limited to items related to NPC onsite visits and customer complaints.
• Assist the team in examinations, audits, and reviews related to privacy and AI.

1. Policy Management and Alignment

• Contribute to drafting, reviewing, and localizing AXA PH AI Compliance Policy and AXA PH Data Privacy Policy based on relevant laws, regulations, and AXA Group requirements
• Track and communicate updates to laws, regulations, and Group requirements impacting Privacy and AI, and brief relevant teams on required changes.

1. Incident and Breach Management

• Monitor and document Privacy and AI incidents/breaches, coordinate response actions per policy and framework, and support regulatory reporting where applicable.
• Implement the incident and breach response process

1. Reporting and Documentation

• Maintain accurate, current entries in the Compliance Operating Plan (COP), reflecting status, links, and evidence for all actions and approvals.
• Produce timely reports and insights for management on incidents and breaches, market trends, and emerging risks relevant to privacy and AI.
• Prepare executive ready materials for internal committees and business stakeholders, using approved terminology.

1. Stakeholder Engagement, Training, and Culture

• Develops and delivers regular AI governance and privacy awareness programs through trainings and communication campaigns to internal stakeholders.

1. Other Tasks (as Needed)

• Support any additional work related to privacy, AI governance, compliance, or risk monitoring.
• Assist with ad hoc tasks or urgent activities to help ensure smooth team operations.

In situations where team members are on leave or when additional support is required, the employee may be assigned the following responsibilities:

• Coordinate with internal stakeholders, including but not limited to Corporate Security, IT, and process owners, to identify, assess, and support the mitigation of privacy and AI-related risks.
• Conduct Privacy Impact Assessments (PIA) and track the progress of action plans, target dates, and follow-through with accountable owners.
• Conduct AI Compliance Assessments and monitor corresponding remediation activities with process owners and relevant stakeholders.

KEY STAKEHOLDERS:

Internal – Business Units, Senior Management, AXA Asia, International Markets Office (IMa) and AXA Group Privacy Counterparts

External – Regulatory Agencies, Vendors, 3rd Party Partners and Customers

EXPERIENCE AND QUALIFICATIONS:

• Bachelor’s degree holder in relevant fields, e.g. Law, Accountancy, Legal Management, Information Security, IT or any related discipline on Data Privacy
• Between 3- 7 years of professional experience in a highly regulated environment, i.e. financial institutions
• Experience in performing control functions, privacy operations or data/information analytics or similar roles
• Good foundational knowledge in Governance Practices, Data Privacy or Compliance, AI, and Information Security.
• Solid understanding of data governance principles, data handling practices, and risk management methodologies.
• Experience conducting technical privacy assessments, audits, and impact assessments.
• Familiarity with emerging technologies and their implications for data privacy, such as Gen AI, artificial intelligence, machine learning, and big data analytics.
• Analytical Skills – has above average understanding of correlation of trends and insights about a given data set
• Can manage or has experience in managing moderate to voluminous data sets using basic analytical and reporting tools (i.e. Microsoft Excel, Microsoft Power BI, Salesforce CRM)
• Excellent communication skills (oral and written)
• Open to learning and agile