Cybersecurity Legal & Regulatory Case Lead

Smart Communications, Inc.; Makati; Sur place; PHP 1 500 000 - 2 300 000; Plein temps

Résumé du poste

Smart Communications, Inc. in the Philippines seeks a seasoned legal professional to lead incident response and regulatory compliance programs in cybersecurity and privacy.

You will oversee investigations, risk reporting, policy development, and vendor governance, translating complex regulations into practical controls across the business. You'll collaborate with cross-functional teams and regulators to ensure compliance, manage data protection, and provide security-focused legal guidance for

Qualifications

• More than 5 years of relevant experience in legal practice and advisory roles, specializing in privacy and data protection, cybersecurity, risk management, and technology law.
• Proven ability to deliver business-focused legal solutions with a strong commitment to problem-solving and operational integrity.
• Demonstrated expertise in managing complex regulatory requirements and ensuring compliance in heavily regulated and audited environments.
• Experienced in drafting, reviewing, and negotiating contracts, as well as implementing corporate rules for international data transfers and data residency.
• Strong background in collaborating with cross-functional teams and stakeholders to align legal strategies with organizational objectives, while maintaining institutional linkages and supporting governance initiatives.

Responsabilités

• Supports investigations of cybersecurity-related incidents and alleged cybercrimes, ensuring evidentiary integrity and proper documentation.
• Maintains and regularly updates the inventory of regulatory, commercial, and organizational technology compliance requirements.
• Collaborates with the Regulatory and Case Management Division Head to enforce cybersecurity laws and privacy regulations across the company.
• Prepares risk briefings, dashboards, and periodic reports (monthly and quarterly) with clear recommendations and decision-ready insights.
• Collaborates with the Division Head and cross-functional leaders to resolve complex legal issues and align legal strategies with business objectives.
• Provides expert advice on compliance with privacy frameworks and applicable statutes. Interprets emerging regulatory requirements and designs practical controls for data collection, processing, retention, sharing, international transfers, and data residency.
• Provides business-facing legal guidance on security controls, technology adoption, vendor engagements, contracts, and enterprise customer requirements, translating legal risk into actionable requirements for information security and operations.
• Reviews, negotiates, and enforces privacy and security clauses in supplier and enterprise customer contracts. Ensures that non-standard security requirements are properly documented, risk-assessed, and monitored for compliance throughout the contract lifecycle.
• Maintains the contract management database, ensuring accurate records of executed contracts and those under development.
• Contributes to drafting and harmonizing policies, standards, and procedures for privacy and cybersecurity governance.
• Supports the design, implementation, and adoption of controls across business units to ensure compliance and operational effectiveness.
• Provides targeted legal guidance, playbooks, and awareness materials for business and technical teams.
• Promotes consistent understanding of obligations and consequences of non-compliance.
• Prepare and consolidate reports from Regulatory and Case Management Supervisory/Staff for submission to the Division Head.
• Maintains a strong understanding of telecommunications and IT processes to tailor advice to technology-driven workflows.

Connaissances

Privacy & data protection

Cybersecurity law

Regulatory compliance

Risk management

Legal advisory

Formation

Bachelor’s degree in Law

Graduation in Computer Science

Business Administration

Description du poste

Smart Communications, Inc. in the Philippines seeks a seasoned legal professional to lead incident response and regulatory compliance programs in cybersecurity and privacy.

You will oversee investigations, risk reporting, policy development, and vendor governance, translating complex regulations into practical controls across the business. You'll collaborate with cross-functional teams and regulators to ensure compliance, manage data protection, and provide security-focused legal guidance for