Data Privacy Leader & Regulatory Compliance

METRO PACIFIC TOLLWAYS CORPORATION; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

METRO PACIFIC TOLLWAYS CORPORATION is seeking an experienced Data Protection Officer to lead the company’s data privacy program in the Philippines. You will ensure compliance with the Data Privacy Act of 2012, manage privacy risks, and guide management and business units on data privacy matters.

You will drive policy development, incident response, DPIAs, training, and reporting to NPC and regulatory authorities, while coordinating with Legal and IT teams to strengthen the data protection

Qualifications

• Bachelor's degree in a relevant field is required.
• Law degree and admission to the Philippine Bar are preferred.
• At least 5 years of experience in data privacy, data protection, or related compliance.

Responsibilities

• Lead preparation and submission of documents for NPC registration/renewal of MPT Group companies.
• Ensure compliance with the Data Privacy Act, IRR, NPC issuances, and related laws.
• Develop, implement, and review data protection policies and guidelines.
• Assist with data subject requests including access, correction, deletion.
• Conduct regular privacy training and awareness sessions for staff.
• Coordinate DPIAs and regular risk assessments for new projects or technologies.
• Act as primary contact among data subjects, the company, and NPC.
• Report to NPC and regulators on data breaches and incidents.

Skills

Data privacy

Regulatory compliance

Stakeholder management

Communication

Leadership

Education

Bachelor's degree

Law degree (preferred)

Job description

METRO PACIFIC TOLLWAYS CORPORATION is seeking an experienced Data Protection Officer to lead the company’s data privacy program in the Philippines. You will ensure compliance with the Data Privacy Act of 2012, manage privacy risks, and guide management and business units on data privacy matters.

You will drive policy development, incident response, DPIAs, training, and reporting to NPC and regulatory authorities, while coordinating with Legal and IT teams to strengthen the data protection