Data Privacy Officer: Compliance & Risk Guardian

Aesthetician Job Description; San Juan; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Belo Medical Group is seeking a Data Privacy Officer to oversee compliance of data processing activities with applicable data protection laws. The role focuses on safeguarding personal data, minimizing privacy risks, and ensuring timely regulatory reporting.

The DPO will develop policies, lead training, conduct DPIAs, and coordinate breach responses. A strong IT/InfoSec background, a formal privacy certification, and 3–5 years of DPO experience are required.

Qualifications

• Graduate of Information Technology, Information Security, or a related field.
• Certified Data Protection Officer.
• At least 3–5 years of experience as Data Protection Officer.

Responsibilities

• Ensure compliance with data protection laws and regulations (e.g., National Privacy Commission).
• Develop and implement data protection policies and guidelines.
• Monitor adherence and update policies to maintain compliance.
• Conduct regular training sessions for employees on privacy principles.
• Lead data privacy initiatives and promote a culture of privacy.
• Conduct Data Privacy Impact Assessments for new projects/processes/technologies.
• Serve as primary contact for data breaches and incidents; investigate and implement corrective actions.
• Coordinate breach responses with authorities and affected individuals as needed.
• Act as liaison with the National Privacy Commission and provide timely regulatory reporting.
• Advise senior management on data protection issues; review contracts and data processing activities with legal.

Skills

Data protection

Regulatory compliance

Policy development

Training & awareness

Incident response

Auditing

Education

Graduate degree in IT/InfoSec or related field

Certified Data Protection Officer

Job description

Belo Medical Group is seeking a Data Privacy Officer to oversee compliance of data processing activities with applicable data protection laws. The role focuses on safeguarding personal data, minimizing privacy risks, and ensuring timely regulatory reporting.

The DPO will develop policies, lead training, conduct DPIAs, and coordinate breach responses. A strong IT/InfoSec background, a formal privacy certification, and 3–5 years of DPO experience are required.