Data Privacy Officer

Risewave Consulting Inc.; Pasig; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Risewave Consulting Inc. is seeking a Data Privacy Officer to oversee the company�s data protection strategy and ensure compliance with the Data Privacy Act of 2012 and global standards. This mid-level role bridges technical operations with regulatory requirements to protect sensitive client and depositor information.

You will lead privacy programs, manage DPIAs, and coordinate incident response and training to enhance privacy by design across banking and outsourcing workflows.

Qualifications

• 3-5 years of dedicated experience in Data Privacy, Compliance, or Information Security.
• Banking/FinTech or BPO/IT-BPM sector experience is mandatory.
• Familiarity with BSP regulations on data governance and consumer protection.
• Experience managing cross-border data flows and client privacy MSAs.
• Bachelor’s degree in Law, Information Technology, Business Administration, or related field.
• NPC DPO ACE Level 1 or 2 (preferred) and IAPP certifications (CIPP/E, CIPM, CIPT).
• Strong understanding of IT infrastructure, encryption standards, and data lifecycle management.

Responsibilities

• Compliance Oversight: Monitor the organization's compliance with the DPA, its IRR, and all relevant NPC circulars.
• Privacy Impact Assessments (PIA): Lead PIAs for new bank products, BPO workflows, and third-party vendor integrations to identify and mitigate privacy risks.
• Incident Management: Serve as the primary lead for the Data Breach Response Team, ensuring timely notification to the NPC and affected data subjects.
• Policy Development: Draft and update Privacy Manuals, Consent Forms, and Data Sharing Agreements (DSAs) tailored to cross-border BPO transfers or banking secrecy laws.
• Training & Awareness: Conduct regular privacy sessions for employees, specifically focusing on "Privacy by Design" in customer service and financial processing.
• Regulatory Liaison: Act as the main point of contact for the National Privacy Commission and handle Data Subject Requests (DSRs).

Job description

Job Summary

We are seeking a detail-oriented and proactive Data Privacy Officer (DPO) to oversee our data protection strategy and ensure the organization remains compliant with the Data Privacy Act of 2012 (RA 10173) and international standards (GDPR/CCPA). In this mid-level role, you will act as the bridge between our technical operations and regulatory requirements, ensuring that the sensitive financial and personal data of our global clients and local depositors are handled with the highest level of integrity.

Key Responsibilities

• Compliance Oversight: Monitor the organization's compliance with the DPA, its IRR, and all relevant NPC circulars.
• Privacy Impact Assessments (PIA): Lead PIAs for new bank products, BPO workflows, and third-party vendor integrations to identify and mitigate privacy risks.
• Incident Management: Serve as the primary lead for the Data Breach Response Team, ensuring timely notification to the NPC and affected data subjects.
• Policy Development: Draft and update Privacy Manuals, Consent Forms, and Data Sharing Agreements (DSAs) tailored to cross-border BPO transfers or banking secrecy laws.
• Training & Awareness: Conduct regular privacy sessions for employees, specifically focusing on "Privacy by Design" in customer service and financial processing.
• Regulatory Liaison: Act as the main point of contact for the National Privacy Commission and handle Data Subject Requests (DSRs).

Qualifications

• Experience: 3-5 years of dedicated experience in Data Privacy, Compliance, or Information Security.
• Industry Expertise: Proven track record in the Banking/FinTech or BPO/IT- BPM sectors is mandatory.
• Banking: Familiarity with BSP (Bangko Sentral ng Pilipinas) regulations on data governance and consumer protection.
• BPO: Experience managing cross-border data flows and client-specific privacy Master Service Agreements (MSAs).
• Education: Bachelor’s degree in Law, Information Technology, Business Administration, or a related field.
• Certifications (Preferred): NPC DPO ACE Level 1 or 2.
• IAPP Certifications (CIPP/E, CIPM, or CIPT).
• Technical Skills: Strong understanding of IT infrastructure, encryption standards, and data lifecycle management.