Data Privacy Officer

Lyceum of the Philippines University Inc.; Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Lyceum of the Philippines University Inc. in Manila is seeking a senior privacy professional to lead the University's Data Privacy Management Program, ensuring compliance with the Data Privacy Act of 2012 and related regulations.

You will serve as the primary point of contact for privacy matters, advise management on risks, develop policies, and oversee data processing activities, including incident response and data subject requests.

Qualifications

• Bachelor's degree in Law or related fields.
• Master's degree, JD, or relevant postgraduate studies are an advantage.
• 3-5 years of relevant privacy/compliance experience.
• Certifications in Data Privacy, Information Security, or Governance are an advantage.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written, verbal, and presentation skills.
• Proficiency with Microsoft Office and digital collaboration tools.
• Ability to handle highly confidential information with integrity and discretion.
• Strong stakeholder management and project coordination skills.

Responsibilities

• Lead the implementation, monitoring, and continuous improvement of the University's Data Privacy Management Program.
• Ensure compliance with the Data Privacy Act of 2012 (RA 10173) and related regulations.
• Serve as the primary point of contact for privacy-related matters.
• Advise management on privacy risks, compliance requirements, and data protection practices.
• Develop, review, and update privacy policies, procedures, and related docs.
• Maintain records of personal data processing activities and documentation of processing systems.
• Lead investigations involving privacy concerns, breaches, and security incidents.
• Coordinate incident response activities and document data breaches.
• Oversee handling of data subject access requests and related tasks.
• Review data sharing/outsource agreements, notices, and consent forms.
• Prepare compliance reports, risk assessments, and executive updates.
• Design and facilitate privacy awareness campaigns and training programs.

Skills

Analytical skills

Organizational skills

Problem-solving

Written and verbal communication

Presentation skills

Microsoft Office

Digital collaboration tools

Judgment and discretion

Stakeholder management

Project coordination

Education

Bachelor's degree in Law or related fields

Master's degree / JD advantageous

Tools

Microsoft Office Suite

Privacy management tools

Job description

Key Responsibilities:

• Lead the implementation, monitoring, and continuous improvement of the University's Data Privacy Management Program.

• Ensure institutional compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and other applicable privacy regulations.

• Serve as the primary point of contact for privacy-related matters within the University.

• Advise management on privacy risks, compliance requirements, and data protection best practices.

• Develop, review, and update privacy policies, procedures, guidelines, and related documentation.

• Maintain records of personal data processing activities and ensure proper documentation of data processing systems.

• Lead investigations involving data privacy concerns, complaints, breaches, and security incidents.

• Coordinate incident response activities and ensure proper documentation and reporting of personal data breaches.

• Oversee the handling of data subject requests, including requests for access, correction, rectification, objection, and deletion of personal information.

• Review and provide recommendations on data sharing agreements, outsourcing agreements, privacy notices, consent forms, and related documents.

• Prepare compliance reports, risk assessments, and executive-level updates for University leadership.

• Design and facilitate privacy awareness campaigns, training programs, and capacity-building activities for employees, faculty members, students, and other stakeholders.

Qualifications:

• Bachelor's degree in Law, Legal Management, Political Science, Information Technology, Computer Science, Information Systems, Business Administration, Public Administration, Accountancy, or other related fields.

• Master's degree, Juris Doctor (JD), or relevant postgraduate studies are an advantage.

• At least 3-5 years of relevant experience in data privacy, compliance, governance, audit, risk management, information security, legal affairs, regulatory compliance, or related fields.

• Relevant certifications in Data Privacy, Information Security, Compliance, Risk Management, or Governance are an advantage.

• Strong analytical, organizational, and problem-solving skills.

• Excellent written, verbal, and presentation skills.

• Proficiency in Microsoft Office applications and digital collaboration tools.

• Ability to exercise sound judgment and handle highly confidential information with integrity and discretion.

• Strong stakeholder management and project coordination skills.