Data Privacy Manager

Filinvest Group; Muntinlupa; On-site; PHP 2,500,000 - 4,500,000; Full time

Job summary

Filinvest Group seeks a senior leader to head the Data Privacy Department, overseeing the privacy program across all business units. You will drive governance, risk assessment, and compliance with the Data Privacy Act, coordinating with Legal, IT, HR and senior management.

You will monitor KPIs, prepare dashboards, oversee COPs, and support the DPO in regulatory engagements and audits, while advancing privacy maturity and awareness initiatives across the organization.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, Legal Management (related field preferred but not required not preferred)
• Law (related field preferred but not required)
• Experience with Data Privacy and Protection, privacy impact assessments, governance and incident response

Responsibilities

• Lead day-to-day operations of the Data Privacy Department.
• Oversee enterprise privacy compliance initiatives and programs.
• Develop and implement privacy governance strategies, frameworks, and roadmaps.
• Monitor privacy KPIs, compliance metrics, and program effectiveness.
• Prepare executive updates, dashboards, and management reports.
• Coordinate COPs and oversight to Privacy Officers.
• Support the DPO in regulatory engagements, inspections, and audits.
• Ensure consistent implementation of privacy policies across units.
• Oversee PIAs, ROPAs, DSAs, and privacy reviews.
• Provide privacy guidance for projects, systems, vendors, and initiatives.
• Escalate significant privacy risks, incidents, and breaches to DPO and senior management.
• Lead privacy awareness campaigns and training programs.
• Collaborate with Legal, Compliance, IT, HR, and business units on privacy matters.
• Monitor regulatory developments and propose program enhancements.
• Drive continuous improvement to governance and compliance maturity.

Skills

Data privacy compliance

Privacy risk management

Data governance

Privacy operations

Incident & breach management

Vendor privacy management

ISO 27001

Audit & compliance monitoring

Privacy awareness & training

Privacy-by-design

Contract & legal review

Education

Bachelor’s degree in IT/CS/IS/Cybersecurity/Business Admin/Law

Law or related field knowledge

Tools

ISO 27001

PIA/ DPIA tooling

Job description

Lead the Data Privacy Department and oversee the implementation, monitoring, and continuous improvement of the Filinvest Group Privacy Management Program. Ensure compliance with the Data Privacy Act of 2012, NPC regulations, internal privacy policies, and industry best practices across all business units.

Duties and Responsibilities

• Manage day-to-day operations of the Data Privacy Department.
• Lead enterprise-wide privacy compliance initiatives and programs.
• Develop and implement privacy governance strategies, frameworks, and roadmaps.
• Monitor privacy KPIs, compliance metrics, and program effectiveness.
• Prepare executive updates, dashboards, and management reports.
• Coordinate and provide oversight to all Compliance Officers for Privacy (COPs).
• Support the DPO in strategic initiatives, regulatory engagements, inspections, and audits.
• Ensure consistent implementation of privacy policies, standards, and procedures across all business units.
• Oversee Privacy Impact Assessments (PIAs), Records of Processing Activities (ROPAs), Data Sharing Agreements (DSAs), and privacy reviews.
• Provide guidance on privacy requirements for projects, systems, vendors, and business initiatives.
• Escalate significant privacy risks, incidents, breaches, and compliance concerns to the DPO and Senior Management.
• Lead privacy awareness campaigns, training programs, and capability-building initiatives.
• Collaborate with Legal, Compliance, Information Security, HR, and business unit representatives on privacy-related matters.
• Monitor regulatory developments and recommend enhancements to the Privacy Management Program.
• Drive continuous improvement initiatives to strengthen privacy governance and compliance maturity.

Technical Competencies and Skills

Data Privacy Compliance (Data Privacy Act & privacy regulations), Privacy Risk Management (DPIA/PIA risk assessments mitigation plans), Data Governance (ROPA data inventory classification retention management), Privacy Operations (consent management privacy notices data subject rights requests), Incident & Breach Management (investigation reporting remediation), Vendor Privacy Management (third-party assessments DPA review due diligence), Information Security Knowledge (ISO 27001 cybersecurity access controls encryption), Audit & Compliance Monitoring (privacy audits control reviews compliance testing), Privacy Awareness & Training (training programs awareness campaigns), Privacy-by-Design & Technology Governance (cloud AI digital platforms new technologies), Contract & Legal Review (DSA DPA NDA privacy clauses)

Education, Trainings and Licenses Required

Education, Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, Legal Management (related field preferred but not required not preferred), Law (related field preferred but not required), or a related field, Training, Data Privacy and Data Protection, Privacy Impact Assessment (PIA/DPIA), Data Governance and Records Management, Information Security and Cybersecurity, Incident Response and Risk Management, Privacy-by-Design and AI Governance, Professional Certifications (Preferred), CDPO (Certified Data Protection Officer)