Data Privacy Specialist

Responsibilities

• Support the Data Protection Officer (DPO) in the implementation and monitoring of the Data Privacy Management Program.
• Conduct research, organize, analyze, cross-check, and validate data privacy-related information and documentation.
• Prepare, maintain, and monitor reports, correspondence, forms, records, and other DPO documents .
• Assist in the review and validation of data privacy forms, member/ data subject consent forms, and other privacy-related documents.
• Monitor the DPO Asset Register, Privacy Impact Assessments (PIAs), risk assessments, and QOT objectives, targets, and plans .
• Monitor and support the implementation of new and existing data privacy operational practices and controls .
• Assist the DPO in reviewing and monitoring new and updated data privacy laws, regulations, and NPC issuances .
• Support the conduct of Business Impact Analysis (BIA) and other privacy and compliance assessments.
• Maintain and update reference files, masterlists, records, and documentation in accordance with DPO policies and guidelines.
• Act as Document Controller for the Data Privacy Office and ensure proper document version control and records management.
• Support the validation of ISMS and DPA awareness assessments .
• Maintain and monitor data privacy requirements and documentation for third parties , including clients, vendors, processors, and affiliates.
• Support communication and coordination between the DPO, process owners, and Legal Office on privacy-related matters.
• Act as the primary message transfer agent for DPO transaction requests and communications received through the official DPO mailbox.
• Support the DPO in the organization’s information life cycle management activities.
• Assist in monitoring the organization's data breach management and reporting program .
• Support privacy management initiatives, certification activities, audits, and other compliance requirements as assigned.
• Prepare and submit Document Review Reports, Masterlists of Records, and other periodic or ad hoc reports .
• Perform other related duties and responsibilities that may be assigned by the DPO or management.
  
  

• 2–4 years of relevant experience in Data Privacy, Compliance, Risk Management, Information Security, Quality Management, Document Control, or a related field.
• Experience in data privacy compliance, documentation, audit, risk assessment, or regulatory monitoring is preferred.
• Experience working with policies, procedures, controlled documents, reports, and compliance records .
• Exposure to Privacy Impact Assessments (PIA), Business Impact Analysis (BIA), data breach management, or information security practices is an advantage.
• Experience coordinating with Legal, Compliance, Information Security, Quality, or other process owners is preferred.
  
  

• Bachelor’s degree in Data Privacy, Information Technology, Computer Science, Business Administration, Legal Management, Risk Management, Quality Management , or a related field.
• Knowledge of the Data Privacy Act of 2012 (RA 10173) and relevant National Privacy Commission (NPC) regulations and issuances.
• Knowledge of data privacy principles, information life cycle management, privacy risk management, and compliance monitoring .
• Familiarity with ISO 27001/ISMS, data protection agreements, Privacy Impact Assessments, and data breach management is an advantage.
• Strong research, analytical, validation, documentation, and records management skills .
• Excellent written and verbal communication and coordination skills .
• Highly organized, detail-oriented, and able to manage multiple compliance activities and deadlines.
• Proficient in Microsoft Office applications , particularly Word, Excel, and PowerPoint.
• Ability to maintain confidentiality and proper handling of sensitive and personal information .
• Certification or training in Data Privacy, Privacy Management, Information Security, ISO, or Compliance is an advantage.