Data Privacy Leader for Banking & FinTech

Risewave Consulting Inc.; Pasig; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Risewave Consulting Inc. is seeking a Data Privacy Officer to oversee the company�s data protection strategy and ensure compliance with the Data Privacy Act of 2012 and global standards. This mid-level role bridges technical operations with regulatory requirements to protect sensitive client and depositor information.

You will lead privacy programs, manage DPIAs, and coordinate incident response and training to enhance privacy by design across banking and outsourcing workflows.

Qualifications

• 3-5 years of dedicated experience in Data Privacy, Compliance, or Information Security.
• Banking/FinTech or BPO/IT-BPM sector experience is mandatory.
• Familiarity with BSP regulations on data governance and consumer protection.
• Experience managing cross-border data flows and client privacy MSAs.
• Bachelor’s degree in Law, Information Technology, Business Administration, or related field.
• NPC DPO ACE Level 1 or 2 (preferred) and IAPP certifications (CIPP/E, CIPM, CIPT).
• Strong understanding of IT infrastructure, encryption standards, and data lifecycle management.

Responsibilities

• Compliance Oversight: Monitor the organization's compliance with the DPA, its IRR, and all relevant NPC circulars.
• Privacy Impact Assessments (PIA): Lead PIAs for new bank products, BPO workflows, and third-party vendor integrations to identify and mitigate privacy risks.
• Incident Management: Serve as the primary lead for the Data Breach Response Team, ensuring timely notification to the NPC and affected data subjects.
• Policy Development: Draft and update Privacy Manuals, Consent Forms, and Data Sharing Agreements (DSAs) tailored to cross-border BPO transfers or banking secrecy laws.
• Training & Awareness: Conduct regular privacy sessions for employees, specifically focusing on "Privacy by Design" in customer service and financial processing.
• Regulatory Liaison: Act as the main point of contact for the National Privacy Commission and handle Data Subject Requests (DSRs).

Job description

Risewave Consulting Inc. is seeking a Data Privacy Officer to oversee the company�s data protection strategy and ensure compliance with the Data Privacy Act of 2012 and global standards. This mid-level role bridges technical operations with regulatory requirements to protect sensitive client and depositor information.

You will lead privacy programs, manage DPIAs, and coordinate incident response and training to enhance privacy by design across banking and outsourcing workflows.