Data Privacy Officer (Midshift, Onsite)

blaseek; Pasig; On-site; PHP 446,400 - 781,200; Full time

Job summary

blaseek in Pasig, Metro Manila, is looking for a Privacy Compliance Manager to lead data privacy and compliance programs in accordance with the Philippine Data Privacy Act and international standards. The role involves ensuring compliance, conducting risk assessments, and promoting data handling practices.

The ideal candidate holds a Bachelor’s degree and has 3–5 years of relevant experience, particularly in Banking, FinTech, or BPO sectors. Strong communication and analytical skills are essential for this position.

Qualifications

• 3–5 years of experience in Data Privacy, Compliance, Risk Management, or Information Security.
• Strong understanding of the Philippine Data Privacy Act (RA 10173) and related regulations.
• Knowledge of data governance, privacy frameworks, and information security principles.

Responsibilities

• Lead and manage data privacy and compliance programs.
• Ensure compliance with the Philippine Data Privacy Act of 2012.
• Conduct Privacy Impact Assessments (PIAs) for new systems and vendors.

Skills

Data Privacy Compliance

Risk Management

Information Security

Analytical Skills

Communication Skills

Education

Bachelor’s degree in Law, Information Technology, Business Administration, or related field

Tools

GDPR frameworks

CCPA frameworks

Privacy Impact Assessment methodologies

Job description

Job Overview

Lead and manage data privacy and compliance programs in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), National Privacy Commission (NPC) regulations, and relevant international standards such as GDPR and CCPA. Ensure that sensitive personal and business data is properly protected across all operations, particularly in regulated environments such as Banking, FinTech, and BPO/IT-BPM.

Key Responsibilities

Privacy Compliance & Governance

• Ensure compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and NPC issuances.
• Monitor organization-wide privacy compliance and recommend corrective actions when needed.
• Develop, maintain, and update privacy policies, manuals, consent forms, and data-sharing agreements.

Privacy Risk Management

• Conduct Privacy Impact Assessments (PIAs) for new products, systems, workflows, and third-party vendors.
• Identify privacy risks and implement mitigation strategies aligned with data protection standards.
• Support privacy-by-design principles and data lifecycle governance.

Incident & Breach Management

• Lead data breach response activities and investigations.
• Ensure timely reporting and notification to relevant authorities and affected data subjects.
• Coordinate with internal teams during security and privacy incidents.

Training & Awareness

• Conduct privacy and compliance training programs for employees.
• Promote awareness of data protection principles and responsible data handling practices.

Regulatory & Stakeholder Management

• Serve as primary liaison with the National Privacy Commission (NPC).
• Manage Data Subject Requests (DSRs) in accordance with regulatory requirements.
• Provide guidance to internal teams on privacy and compliance matters.

Qualifications

Required

• Bachelor’s degree in Law, Information Technology, Business Administration, or related field.
• 3–5 years of experience in Data Privacy, Compliance, Risk Management, or Information Security.
• Experience in Banking, Financial Services, FinTech, BPO, or IT-BPM industries.
• Strong understanding of the Philippine Data Privacy Act (RA 10173) and related regulations.
• Knowledge of data governance, privacy frameworks, and information security principles.
• Strong analytical, communication, and documentation skills.

Preferred

• NPC DPO ACE Level 1 or Level 2 certification.
• IAPP certifications (CIPP, CIPM, CIPT).
• Familiarity with GDPR, CCPA, and other international privacy frameworks.
• Experience with BSP regulations on data governance and consumer protection.
• Exposure to cross-border data processing and client data-sharing agreements.