Data Privacy & Compliance Lead - Hybrid

Private Advertiser; Mandaluyong; Hybrid; PHP 670,000 - 1,116,000; Full time

Job summary

Private Advertiser is seeking a Data Protection Officer to embed privacy and data protection practices across the organization. You will be the primary contact for privacy issues and collaborate with privacy, security, and risk teams in monthly meetings.

The role covers ownership of privacy processes, DSAR handling, DPIAs, incident response, DPAs, and vendor privacy controls to ensure compliance with GDPR and Philippine data privacy regulations, in a hybrid work setting with 2–3 days onsite.

Qualifications

• Good understanding of business processes and information technology related to eCommerce.
• In-depth knowledge of data privacy laws governing the organization.
• 1–2 years of experience in data privacy or compliance.
• Knowledge of GDPR and Philippines Data Privacy Act regulations.
• Willingness to learn in privacy management, risk assessment, or compliance.
• Strong communication skills to advocate for privacy practices and liaise with stakeholders.
• Ability to handle confidential information with integrity and discretion.
• Willingness to learn in conducting DPAs, managing data breaches, and maintaining records.

Responsibilities

• Act as the primary point of contact for privacy-related issues and coordinate with privacy, security, legal, and risk teams.
• Own privacy processes and align them with company objectives; refine privacy procedures and mitigate risks.
• Coordinate and document ROPA elements, DPIAs, DSAR handling, and incident response.
• Review contracts and ensure DPAs and privacy controls meet regulatory requirements.
• Manage access rights reviews across systems and coordinate with owners for revocation and improvements.
• Provide privacy-by-design recommendations and assist in vendor privacy management.

Education

Bachelor's degree

Job description

Private Advertiser is seeking a Data Protection Officer to embed privacy and data protection practices across the organization. You will be the primary contact for privacy issues and collaborate with privacy, security, and risk teams in monthly meetings.

The role covers ownership of privacy processes, DSAR handling, DPIAs, incident response, DPAs, and vendor privacy controls to ensure compliance with GDPR and Philippine data privacy regulations, in a hybrid work setting with 2–3 days onsite.