Cybersecurity Regulatory and Case Management Executive

Smart Communications, Inc.; Makati; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Smart Communications, Inc. is seeking a senior legal and cybersecurity professional based in Metro Manila to lead incident response, privacy compliance, and regulatory strategy. The role focuses on investigations, contract governance, and cross-functional coordination with regulators and internal teams.

You will drive policy development, risk reporting, and training across the organization to ensure data protection and strong governance in a dynamic telecommunications environment.

Qualifications

• Bachelor's degree in Law, Computer Science, or Business Administration; a graduate degree is preferred.
• 5+ years of experience in legal advisory, privacy, and cybersecurity.
• Experience drafting, reviewing, and negotiating contracts and governing data transfers.

Responsibilities

• Lead incident response and investigations to ensure evidentiary integrity and proper documentation.
• Maintain and track regulatory compliance requirements and audit readiness.
• Draft policies, standards, and procedures for privacy and cybersecurity governance.
• Coordinate with regulators, government agencies, and cross-functional teams.
• Prepare risk briefings, dashboards, and regular reports with actionable insights.
• Oversee contract reviews and third-party governance related to privacy and security.

Skills

Legal advisory

Privacy & data protection

Cybersecurity

Regulatory compliance

Education

Bachelor's degree in Law, CS, or Business Admin

Job description

Incident Response & Investigations (Cybercrime)

Supports investigations of cybersecurity-related incidents and alleged cybercrimes. Ensures evidentiary integrity, legal sufficiency, and proper documentation throughout the process. Coordinates internal and external stakeholders to achieve timely and effective resolution.

Regulatory Compliance

Maintains and regularly updates the inventory of all regulatory, commercial, and organizational technology compliance requirements. Assists in identifying compliance obligations, such as security, user access, privacy, and data integrity associated with applicable laws and regulations. Ensures alignment with evolving regulatory standards and supports audit readiness.

Case Management

Collaborates with the Regulatory and Case Management Division Head to enforce cybersecurity laws and privacy regulations across the company. Maintains procedures, repositories, and workflows for the intake, tracking, and closure of cases and matters. Ensures timely documentation and resolution in accordance with company policies and applicable regulations.

Identifies, assesses, and escalates legal and regulatory risks associated with cybersecurity initiatives. Prepares risk briefings, dashboards, and periodic reports (monthly and quarterly) with clear recommendations and decision-ready insights.

Regulatory Strategy & Stakeholder Coordination

Collaborates with the Division Head and cross-functional leaders to resolve complex legal issues and align legal strategies with business objectives. Maintains strong working linkages with regulators, government agencies, and industry bodies to ensure compliance and support organizational goals.

Privacy & Data Protection (Domestic & International)

Provides expert advice on compliance with privacy frameworks and applicable statutes. Interprets emerging regulatory requirements and designs practical controls for data collection, processing, retention, sharing, international transfers, and data residency.

Cybersecurity Legal Advisory

Provides business-facing legal guidance on security controls, technology adoption, vendor engagements, contracts, and enterprise customer requirements, Translates legal risk into actionable requirements for information security and operations.

Contracting & Third-Party Governance

Reviews, negotiates, and enforces privacy and security clauses in supplier and enterprise customer contracts. Ensures that non-standard security requirements are properly documented, risk-assessed, and monitored for compliance throughout the contract lifecycle.

Security Contracts

Conducts initial reviews of contracts, statements of work (SOWs), and procurement documents (RFIs, RFQs, RFPs) to identify security-related commercial requirements and applicable industry standards. Maintains the contract management database, ensuring accurate records of executed contracts and those under development.

Policy Development & Control Enablement

Contributes to drafting and harmonizing policies, standards, and procedures for privacy and cybersecurity governance. Supports the design, implementation, and adoption of controls across business units to ensure compliance and operational effectiveness.

Training, Awareness & Advisory

Provides targeted legal guidance, playbooks, and awareness materials for business and technical teams. Promotes consistent understanding of obligations and consequences of non-compliance.

Governance Support

Prepare and consolidate reports from Regulatory and Case Management Supervisory/Staff for submission to the Regulatory and Case Management Division Head.

Telecommunications & Technology Industry Insight

Maintains a strong understanding of telecommunications and IT business processes, architectures, and operational practices. Tailors legal advice to technology-driven workflows, service delivery models, and customer or partner ecosystems.

HR Labor Relations

Prepares and consolidates reports from Regulatory and Case Management supervisory staff for submission to the Regulatory and Case Management Division or Cyber Security Governance Head.

People Management

Provides timely, constructive feedback on staff and supervisor performance. Acts as a mentor and role model, fostering growth and development. Ensures the creation and execution of effective succession plans to build future leadership.

Operational Support

Provide leadership and support for additional duties and responsibilities as assigned, ensuring alignment with organizational priorities and operational excellence.

EDUCATION

• Bachelor’s degree in Law, Computer Science, or Business Administration; a graduate degree in any of these fields is preferred.

WORK EXPERIENCE

• More than 5 years of relevant experience in legal practice and advisory roles, specializing in privacy and data protection, cybersecurity, risk management, and technology law.
• Proven ability to deliver business-focused legal solutions with a strong commitment to problem-solving and operational integrity.
• Demonstrated expertise in managing complex regulatory requirements and ensuring compliance in heavily regulated and audited environments.
• Experienced in drafting, reviewing, and negotiating contracts, as well as implementing corporate rules for international data transfers and data residency.
• Strong background in collaborating with cross-functional teams and stakeholders to align legal strategies with organizational objectives, while maintaining institutional linkages and supporting governance initiatives.