Data Privacy Governance Officer-Assurance

UnionBank; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Union Bank of the Philippines seeks a Data Privacy Governance Officer-Assurance to drive Privacy by Design and Default across the Bank’s products, processes, and systems, coordinating remediation actions and privacy assessments.

The role is based at UB Plaza, Pasig, with responsibilities spanning audits, forensics support, and updating privacy documentation to strengthen data protection across banking operations.

Qualifications

• Bachelor’s degree in IT, CS, Information Security, Risk Management, Internal Audit, Legal Management, Business Admin, or related field.
• 2–5 years in Data Privacy, Compliance, Risk Management, Information Security, Internal Audit, Governance, or related risk and control functions.
• Proven experience in compliance reviews, risk assessments, control validation, audit activities, remediation tracking.
• Familiarity with third-party risk management, outsourcing governance, vendor due diligence, and regulatory compliance requirements is an advantage.
• Strong analytical, problem-solving, and stakeholder management skills; banking/fintech or regulated industries preferred.
• Certifications (e.g., CISA, CRISC, CIPP, DPO, CIA, ISO 27001) are a plus.

Responsibilities

• Proper implementation of Privacy by Design and Default practices and policies across the Bank’s products, processes, services, and systems.
• Validate remediation actions via assessments, spot checks, mystery shopper, and penetration testing.
• Verify security of applications, systems, platforms, softwares, and OS housing personal data before production.
• Coordinate annual Bank-wide Privacy Self-Assessment.
• Maintain and update comprehensive privacy documentation and records.
• Coordinate with IT and Information Security to ensure technical and physical controls protect personal data; collaborate with Legal and other stakeholders to embed privacy in processes.
• Assist in forensics investigations and privacy incident responses.

Skills

Data privacy

Risk management

Auditing

Stakeholder management

Education

Bachelor's degree or higher in IT/IS/Business

Tools

Regulatory frameworks

Job description

Job Description

Company

Union Bank of the Philippines

Position

Data Privacy Governance Officer-Assurance

Office Location

UB Plaza - 25F Pasig (Headquarters)

Job Summary

The Data Privacy Assurance Officer is responsible for the proper implementation of Privacy by Design and Default practices and policies with the Bank's products, processes, services, and systems. PAO shall conduct assessments, audits, and forensic investigations in relation to validation of remediation actions. PAO shall also test the effectiveness of Bank's data privacy-related policies and processes.

Duties And Responsibilities

• Responsible for the proper implementation of Privacy by Design and by Default practices and policies within the Bank's products, processes, services, and systems
• Responsible for validating remediation actions, as recommended by Privacy Designers during assessments, such as through the conduct of random spot checks, mystery shopper, and penetration testing
• Responsible for the verification that the applications, systems, platforms, softwares, and operating systems housing personal data are secure before putting them into production
• Responsible for the annual conduct and coordination of the Bank-wide Privacy Self-Assessment
• Responsible for safeguarding the efficiency and effectivity of privacy standards set in place for practices and policies for products, processes, services, and systems through:
• (a) conduct of simulation activities on the impact of vulnerabilities on the Bank's information technology systems;
• (b) coordination with Information Technology and Information Security teams to ensure that appropriate technical and physical controls are in place to protect personal data; and
• (c) coordination with other stakeholders, such as Legal, Information Technology, and Information Security teams, to ensure that privacy is integrated into all business processes
• Consulted when conducting forensics investigations and responding to privacy-related incidents which involves examination of systems and technology
• Responsible for maintaining and updating comprehensive documentation of privacy policies, procedures, assessments, incident response activities, and other relevant privacy-related records
• Responsible for the safekeeping, monitoring, and tracking of the following:
• (a) signed data privacy related documents, which shall be referred from the list of the Information Security and Data Privacy Legal Controls Officer; and
• (b) remediation actions arising from Privacy Impact Assessments, Privacy Self-Assessments, Security Incident
• Privacy Impact Assessments, and other recommendations provided by the Data Privacy Office.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Security, Risk Management, Internal Audit, Legal Management, Business Administration, or a related field.
• Minimum of 2–5 years of experience in Data Privacy, Compliance, Risk Management, Information Security, Internal Audit, Governance, or related risk and control functions.
• Proven experience in conducting compliance reviews, risk assessments, control validation, audit activities, and remediation tracking.
• Familiarity with third-party risk management, outsourcing governance, vendor due diligence, and regulatory compliance requirements is an advantage.
• Strong analytical, problem-solving, and stakeholder management skills; experience in banking, financial services, fintech, or other highly regulated industries is preferred.
• Relevant certifications (e.g., CISA, CRISC, CIPP, DPO, CIA, ISO 27001) are a plus.