Associate Legal Counsel (Regulatory Officer and Data Privacy Officer)

What you will do:

• Ensure the company operates in compliance with applicable laws and regulations, particularly on regulatory matters such as SEC, BIR, NTC, BSP/AMLA;
• Drafting, reviewing and negotiating commercial and corporate contracts and agreements;
• Conduct legal research on laws, rules, and regulations affecting the operations of the company and its subsidiaries, particularly on regulatory matters as mentioned above;
• Review all cases & legal disputes involving the company, study suitable courses of actions, or defenses; and
• Liaising with regulatory agencies involving PGC group of companies

• Provide support and perform some of the functions as assigned by the Data Privacy Officer (DPO) for ensuring the company’s compliance with the Data Privacy Act and other privacy laws. The COP shall report to the DPO on all privacy matters.
• Adopt and implement the policies, standards, procedures and privacy framework issued by the CDPO
• Monitor the company’s compliance with the Data Privacy Act, issuances by the Commission, and other privacy laws.
• Ensure the conduct of Privacy Threshold Assessments and Privacy Impact Assessments, if required, relative to the Personal Data processing activities, projects, programs, or systems of the company;
• Use Privacy Impact Assessments and recommendations from Privacy Assessment Memos to develop and update the company’s privacy program;
• Advise the company regarding complaints and/or the exercise by its Data Subjects of their rights (e.g., requests for information, clarifications, rectification or deletion of personal data);
• Serve as the contact person of the company vis-à-vis its Data Subjects, the Commission and other relevant authorities and organizations in all matters concerning data privacy or security matters of the company;

What you are expected to deliver:

• Up-to-date regulatory matters, policies, memorandum circulars, rules and regulations affecting PGC group of companies
• Efficient time management and quick turnaround on contract review/drafting requests, and legal opinion
• Assist Legal Counsel/Associate Legal Counsels of PGC in all general legal services
• Privacy Impact Assessments (PIA) and Privacy Threshold Assessments for all products / systems / processes (New and BAU) that directly involve the processing of Personal Data (PI/SPI).
• Data Privacy (DP) Incident reports for all reported security incidents and DP breach cases
• Compliance Measurements and Reports
• Privacy Management Program
• Privacy Manual
• Inventory of Data Processing Activities
• Inventory of Data Processing Systems
• Compliance Self-Assessments prior to the conduct of privacy compliance check and audits
• DP Business Rhythm with entity’s DP Committee and Business Stakeholders
• Cascade of Data Privacy Advisories

What is expected of you:

• Be adept in MS Word, MS Powerpoint, MS Sharepoint/online applications, and MS Excel
• Able to efficiently work remotely/online and on-site
• Have a good command on legalese as well as client/customer-friendly terms
• Have good oral and written English communication skills
• Strong understanding of the Data Privacy Act and privacy laws in other jurisdictions.
• Familiarity with data privacy and information security best practices

What you should have:

• Must possess at least a Bachelor’s Degree in Law/Juris Doctor
• At least THREE (3) years experience in a legal environment/reputable law firm (Maximum of 4 years)
• Member of the Philippine Bar
• Experience/Focus on:
• Litigation
• Commercial Law
• Taxation Law
• Data Privacy (high priority)
• Banking Laws (ie. BSP/AMLA) & E-Commerce-related Laws (high priority)
• Advantage: Knowledge of Philippine and Global Data Privacy Laws
• Trainings:
• DPO Briefing at National Privacy Commission or other local privacy organizations
• Certified Information Privacy Manager (CIPM)