Data Privacy Officer

IGO Digital Technology Inc.; Taguig; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

IGO Digital Technology Inc. is seeking a Data Privacy Officer to own our data protection program end-to-end in the Philippines.

You will translate the Data Privacy Act of 2012 into practical safeguards, implement policies, and coordinate with the NPC on registrations and breach notifications. This hands-on, high-visibility role requires independent operation, regular DPIAs, training sessions for employees, and reporting to senior management to build a culture of privacy across our fast-moving,

Qualifications

• At least 2 years of hands-on DPIA experience.
• Deep familiarity with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.
• Demonstrated experience using the NPC Registration System (NPCRS) and the Data Breach Notification Management System (DBNMS).
• Experience developing and rolling out data protection policies, procedures, and training programs.
• Comfort engaging directly with regulators (NPC) and advising Senior Management.
• Strong investigative and incident-response instincts and excellent written/verbal communication.

Responsibilities

• Ensure the organization’s compliance with data protection laws and NPC requirements.
• Develop and implement data protection policies, procedures, and guidelines across the organization.
• Monitor adherence to data protection standards and update policies regularly.
• Conduct regular DPIAs for new projects, processes, or technologies.
• Coordinate breach response end-to-end, including notification to authorities and affected individuals.
• Advise Senior Management and other departments on data protection and privacy matters.
• Maintain Records of Processing Activities and audit trails.
• Provide regular training sessions to build awareness of data protection principles.

Job description

IGO Digital Technology Inc. is a Philippines-based gaming services and technology company, processing significant volumes of personal and financial data across our user base, partners, and internal operations. We're looking for a Data Privacy Officer to own our data protection program end-to-end — from policy and compliance to breach response and regulatory liaison with the National Privacy Commission (NPC). This is a hands-on, high-visibility role for someone who can operate independently, translate the Data Privacy Act of 2012 into practical safeguards, and build a genuine culture of privacy across a fast-moving, regulated organization.

WHAT YOU'LL OWN

• Ensure the organization's compliance with data protection laws and regulations, including requirements set by the National Privacy Commission and other relevant local data protection laws.
• Develop and implement data protection policies, procedures, and guidelines across the organization.
• Monitor adherence to data protection standards, and regularly review and update policies to maintain ongoing compliance.
• Conduct regular training sessions and workshops for employees to build awareness and understanding of data protection principles.
• Promote a culture of data privacy by leading organization-wide awareness initiatives.
• Conduct Data Privacy Impact Assessments (DPIAs) for new projects, processes, or technologies to identify and mitigate privacy risks before launch.
• Serve as the primary point of contact for data breaches and privacy incidents.
• Investigate data breaches and incidents, and implement corrective actions to prevent recurrence.
• Coordinate breach response end-to-end, including notification to relevant authorities and affected individuals as needed, logged and tracked through the Data Breach Notification Management System (DBNMS).
• Act as the organization's primary point of contact with the National Privacy Commission, including registration and filings via the NPC Registration System (NPCRS).
• Ensure timely and accurate reporting to regulatory authorities, including data breach notifications.
• Advise Senior Management and other departments on data protection and privacy matters.
• Partner with Legal Counsel on the review of contracts, agreements, and data processing activities to ensure compliance with data protection laws.
• Maintain accurate, up-to-date records of all data processing activities within the organization.
• Stay current on changes in data protection laws, NPC issuances, and industry best practices.
• Continuously assess and improve the organization's data protection framework to keep pace with evolving legal requirements and technology.
• Conduct regular audits of data processing activities to verify compliance with internal policy and legal requirements.
• Identify areas for improvement and implement corrective actions where needed.
• Provide regular reports to Management on data protection compliance, risks, and incidents.

WHAT YOU BRING

• At least 2 years of hands-on experience conducting Data Privacy Impact Assessments (DPIAs).
• Deep, working familiarity with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations — you can apply it practically, not just cite it.
• Demonstrated experience using the NPC Registration System (NPCRS) and the Data Breach Notification Management System (DBNMS).
• Experience developing and rolling out data protection policies, procedures, and training programs.
• Comfort engaging directly with regulators (NPC) and confidently advising Senior Management.
• Strong investigative and incident-response instincts — calm, structured, and thorough under pressure.
• Excellent written and verbal communication skills, with the ability to translate legal/regulatory requirements into clear, actionable guidance for non-legal teams.
• High attention to detail and strong record-keeping discipline (Records of Processing Activities, audit trails, documentation).

NICE TO HAVE

• Prior experience in iGaming, fintech, e-wallet, or another highly regulated, high-data-volume industry.
• Formal Data Privacy / DPO certification (e.g., Certified Information Privacy Professional, PDPA/DPA-specific certification, or NPC-recognized DPO training).
• Experience working alongside PAGCOR or other Philippine regulatory bodies.
• Familiarity with information security frameworks (ISO 27001, NIST) as they intersect with data privacy.
• Experience managing privacy matters across multiple jurisdictions (e.g., Taiwan, Brazil, or other regional markets).

You'll build and shape the data privacy function with direct access to senior management, real ownership over policy and incident response, and a mandate to make privacy a genuine part of company culture, not a compliance checkbox.