Data Privacy Manager

Filinvest Business Services Corporation; Manila; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Filinvest Business Services Corporation in Metro Manila seeks a leader to head the Data Privacy Department, overseeing the privacy program across the group and ensuring compliance with the Data Privacy Act of 2012, NPC regulations, and internal policies.

You will drive governance, monitor KPIs, coordinate with COPs and the DPO, conduct PIAs/ROPAs, manage incidents, and lead training to embed privacy by design across all units.

Qualifications

• Bachelor’s degree in a related field; privacy and data protection knowledge preferred.
• Experience leading a privacy program and managing DPIA/PIA risk assessments.
• Strong collaboration with Legal, Compliance, and InfoSec teams.

Responsibilities

• Lead the Data Privacy Department and oversee the privacy program.
• Ensure compliance with the Data Privacy Act and NPC regulations across units.
• Develop privacy governance strategies, roadmaps, and KPIs.
• Monitor compliance metrics and program effectiveness; prepare reports.
• Coordinate with COPs, support the DPO on strategic initiatives and audits.
• Oversee PIAs/ROPAs/DSAs and privacy reviews; enforce privacy policies.
• Provide guidance for privacy requirements in projects, systems, vendors.
• Escalate privacy risks and incidents to the DPO and senior management.
• Lead privacy awareness campaigns and training initiatives.

Skills

Data Privacy Compliance

Privacy Risk Management

Data Governance

Privacy Operations

Incident & Breach Management

Vendor Privacy Management

Information Security Knowledge

Audit & Compliance Monitoring

Privacy Awareness & Training

Privacy-by-Design & Tech Governance

Contract & Legal Review

Education

Bachelor’s degree in IT/CS/IS/Cybersecurity/BA/Legal Management

Data Privacy & Protection training

PIA/DPIA, ROPA, DSA knowledge

Information Security / Cybersecurity training

Professional Certifications (Preferred)

CDPO (Certified Data Protection Officer)

Tools

ISO 27001

Job description

Job Summary

Lead the Data Privacy Department and oversee the implementation, monitoring, and continuous improvement of the Filinvest Group Privacy Management Program. Ensure compliance with the Data Privacy Act of 2012, NPC regulations, internal privacy policies, and industry best practices across all business units.

Duties and Responsibilities

• Manage day-to-day operations ofthe Data Privacy Department.
• Lead enterprise-wide privacycompliance initiatives and programs.
• Develop and implement privacygovernance strategies, frameworks, and roadmaps.
• Monitor privacy KPIs, compliancemetrics, and program effectiveness.
• Prepare executive updates,dashboards, and management reports.
• Coordinate and provide oversightto all Compliance Officers for Privacy (COPs).
• Support the DPO in strategicinitiatives, regulatory engagements, inspections, and audits.
• Ensure consistent implementationof privacy policies, standards, and procedures across all business units.
• Oversee Privacy Impact Assessments(PIAs), Records of Processing Activities (ROPAs), Data Sharing Agreements(DSAs), and privacy reviews.
• Provide guidance on privacyrequirements for projects, systems, vendors, and business initiatives.
• Escalate significant privacyrisks, incidents, breaches, and compliance concerns to the DPO and SeniorManagement.
• Lead privacy awareness campaigns,training programs, and capability-building initiatives.
• Collaborate with Legal,Compliance, Information Security, HR, and business unit representatives onprivacy-related matters.
• Monitor regulatory developmentsand recommend enhancements to the Privacy Management Program.
• Drive continuous improvementinitiatives to strengthen privacy governance and compliance maturity.

Technical Competencies and Skills

Data Privacy Compliance (Data Privacy Act & privacy regulations), Privacy Risk Management (DPIA/PIA risk assessments mitigation plans), Data Governance (ROPA data inventory classification retention management), Privacy Operations (consent management privacy notices data subject rights requests), Incident & Breach Management (investigation reporting remediation), Vendor Privacy Management (third-party assessments DPA review due diligence), Information Security Knowledge (ISO 27001 cybersecurity access controls encryption), Audit & Compliance Monitoring (privacy audits control reviews compliance testing), Privacy Awareness & Training (training programs awareness campaigns), Privacy-by-Design & Technology Governance (cloud AI digital platforms new technologies), Contract & Legal Review (DSA DPA NDA privacy clauses)

Education, Trainings and Licenses Required

Education, Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, Legal Management (related field preferred but not required not preferred), Law (related field preferred but not required), or a related field, Training, Data Privacy and Data Protection, Privacy Impact Assessment (PIA/DPIA), Data Governance and Records Management, Information Security and Cybersecurity, Incident Response and Risk Management, Privacy-by-Design and AI Governance, Professional Certifications (Preferred), CDPO (Certified Data Protection Officer)