Data Privacy Officer

MEDICARE PLUS, INC.; Pasig; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Medicare Plus, Inc. in Pasig, Philippines, seeks a privacy officer to lead the privacy program, conduct Privacy Threshold Assessments and Privacy Impact Assessments, and update the program with recommendations to protect personal data.

You will review risk treatment plans with owners and monitor implementation, ensuring timely breach reporting to authorities. The role requires a strong grasp of the Data Privacy Act, familiarity with information security best practices, and experience in

Qualifications

• Strong understanding of the Data Privacy Act and privacy laws in other jurisdictions.
• Familiarity with data privacy and information security best practices.
• Information Technology and Data Management
• Audit/Risk Management
• Business Process Management
• Program & Project Management

Responsibilities

• Ensure the conduct of Privacy Threshold Assessments and Privacy Impact Assessments
• Use Privacy Impact Assessments and recommendations from Privacy Assessment Memos to develop and update the company's privacy program
• Review risk treatment plans with risk owners and monitor its implementation
• Ensure proper Data Breach and Security Incident management by the company, including preparation and submission of reports to the Commission
• Adopt a Privacy by Design approach and advocate for policies, guidelines, and programs relating to privacy and data protection
• Cooperate with the Commission on data privacy and security matters
• Perform other duties to uphold data privacy rights of Data Subjects

Skills

Data Privacy Act knowledge

InfoSec best practices

Audit/Risk Management

Business Process Management

Program & Project Management

Job description

Responsibilities:

• Ensure the conduct of Privacy Threshold Assessments and Privacy Impact Assessments
• Use Privacy Impact Assessments and recommendations from Privacy Assessment Memos to develop and update the company's privacy program
• Review risk treatment plans with risk owners and monitor its implementation
• Ensure proper Data Breach and Security Incident management by the company, including the latter's preparation and submission to the Commission of reports, where applicable, and other documentation concerning personal data breaches within the prescribed period
• Adopt a Privacy by Design approach, advocate for the development, review and/or revision of policies, guidelines, projects and/or programs of the company relating to privacy and data protection
• Cooperate and coordinate with, and seek the advice of, the Commission on matters concerning data privacy and security
• Perform other duties and tasks, including those set forth elsewhere in this Policy, that will further the interest of data privacy and security and uphold the rights of the Data Subjects

Qualifications:

• Strong understanding of the Data Privacy Act and privacy laws in other jurisdictions
• Familiarity with data privacy and information security best practices
• Information Technology and Data Management
• Audit/Risk Management
• Business Process Management
• Program & Project Management