Cybersecurity Regulatory and Case Management Executive

Smart Communications, Inc.; Makati; On-site; PHP 900,000 - 1,900,000; Full time

Job summary

Smart Communications, Inc. seeks an experienced legal advisor specializing in cybersecurity, privacy, and regulatory compliance in Metro Manila. The role focuses on evidentiary integrity, data protection, and strategic governance across internal and external stakeholders.

The incumbent will lead contract reviews, third-party governance, and policy development to align with local and international requirements, ensuring audit readiness and compliant operations.

Qualifications

• Legal practitioner with 5+ years in privacy, cybersecurity, and regulatory risk.
• Experience drafting and negotiating contracts with data-transfer knowledge.
• Strong cross-functional collaboration and governance experience.
• Ability to translate regulatory requirements into policies and controls.

Responsibilities

• Lead regulatory and case management reporting to the Division Head.
• Provide targeted legal guidance and awareness materials for business teams.
• Develop policies, standards, and control enablement for privacy and cybersecurity.
• Review contracts and third-party security clauses; monitor compliance.
• Coordinate with regulators and industry bodies to support governance.

Skills

Regulatory compliance

Cybersecurity risk management

Contract negotiation

Policy development

Governance & oversight

Cross-functional collaboration

Legal advisory

Data protection

Education

Bachelor’s degree in Law, Computer Science, or Business Administration

Job description

Incident Response & Investigations (Cybercrime)

Supports investigations of cybersecurity-related incidents and alleged cybercrimes. Ensures evidentiary integrity, legal sufficiency, and proper documentation throughout the process. Coordinates internal and external stakeholders to achieve timely and effective resolution.

Regulatory Compliance

Maintains and regularly updates the inventory of all regulatory, commercial, and organizational technology compliance requirements. Assists in identifying compliance obligations, such as security, user access, privacy, and data integrity associated with applicable laws and regulations. Ensures alignment with evolving regulatory standards and supports audit readiness.

Case Management

Collaborates with the Regulatory and Case Management Division Head to enforce cybersecurity laws and privacy regulations across the company. Maintains procedures, repositories, and workflows for the intake, tracking, and closure of cases and matters. Ensures timely documentation and resolution in accordance with company policies and applicable regulations.

Identifies, assesses, and escalates legal and regulatory risks associated with cybersecurity initiatives. Prepares risk briefings, dashboards, and periodic reports (monthly and quarterly) with clear recommendations and decision-ready insights.

Regulatory Strategy & Stakeholder Coordination

Collaborates with the Division Head and cross-functional leaders to resolve complex legal issues and align legal strategies with business objectives. Maintains strong working linkages with regulators, government agencies, and industry bodies to ensure compliance and support organizational goals.

Privacy & Data Protection (Domestic & International)

Provides expert advice on compliance with privacy frameworks and applicable statutes. Interprets emerging regulatory requirements and designs practical controls for data collection, processing, retention, sharing, international transfers, and data residency.

Cybersecurity Legal Advisory

Provides business-facing legal guidance on security controls, technology adoption, vendor engagements, contracts, and enterprise customer requirements, Translates legal risk into actionable requirements for information security and operations.

Contracting & Third-Party Governance

Reviews, negotiates, and enforces privacy and security clauses in supplier and enterprise customer contracts. Ensures that non-standard security requirements are properly documented, risk-assessed, and monitored for compliance throughout the contract lifecycle.

Security Contracts

Conducts initial reviews of contracts, statements of work (SOWs), and procurement documents (RFIs, RFQs, RFPs) to identify security-related commercial requirements and applicable industry standards. Maintains the contract management database, ensuring accurate records of executed contracts and those under development.

Policy Development & Control Enablement

Contributes to drafting and harmonizing policies, standards, and procedures for privacy and cybersecurity governance. Supports the design, implementation, and adoption of controls across business units to ensure compliance and operational effectiveness.

Training, Awareness & Advisory

Provides targeted legal guidance, playbooks, and awareness materials for business and technical teams. Promotes consistent understanding of obligations and consequences of non‑compliance.

Governance Support

Prepare and consolidate reports from Regulatory and Case Management Supervisory/Staff for submission to the Regulatory and Case Management Division Head.

Telecommunications & Technology Industry Insight

Maintains a strong understanding of telecommunications and IT business processes, architectures, and operational practices. Tailors legal advice to technology‑driven workflows, service delivery models, and customer or partner ecosystems.

HR Labor Relations

Prepares and consolidates reports from Regulatory and Case Management supervisory staff for submission to the Regulatory and Case Management Division or Cyber Security Governance Head.

People Management

Provides timely, constructive feedback on staff and supervisor performance. Acts as a mentor and role model, fostering growth and development. Ensures the creation and execution of effective succession plans to build future leadership.

Operational Support

Provide leadership and support for additional duties and responsibilities as assigned, ensuring alignment with organizational priorities and operational excellence.

EDUCATION

• Bachelor’s degree in Law, Computer Science, or Business Administration; a graduate degree in any of these fields is preferred.

WORK EXPERIENCE

• More than 5 years of relevant experience in legal practice and advisory roles, specializing in privacy and data protection, cybersecurity, risk management, and technology law.
• Proven ability to deliver business‑focused legal solutions with a strong commitment to problem‑solving and operational integrity.
• Demonstrated expertise in managing complex regulatory requirements and ensuring compliance in heavily regulated and audited environments.
• Experienced in drafting, reviewing, and negotiating contracts, as well as implementing corporate rules for international data transfers and data residency.
• Strong background in collaborating with cross‑functional teams and stakeholders to align legal strategies with organizational objectives, while maintaining institutional linkages and supporting governance initiatives.