Data Privacy Program Lead (Banking)

Bank of the Philippine Islands (BPI); Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Bank of the Philippine Islands (BPI) is seeking an assistant to the Data Protection Officer to help implement timely, risk-based privacy programs and activities aligning with regulatory requirements. The role provides strategic support to the business, drive privacy governance, and promote a strong privacy culture across units.

You will develop policies, conduct assessments, and lead awareness initiatives while coordinating investigations and handling data subject requests to ensure regulatory

Qualifications

• Experience in data privacy or compliance.
• At least 1-year exposure to banking operations.
• Knowledge of Data Privacy Act of 2012 and related regulations.
• Understanding of data protection principles and practices.

Responsibilities

• Assist the Data Protection Officer in implementing privacy programs and risk-based activities.
• Manage privacy programs and the GRC platform for policy compliance.
• Provide privacy governance and advisory support to business units.
• Develop privacy policies, standards, assessment tools, and management reports.
• Lead privacy awareness initiatives, trainings, and stakeholder engagement.
• Oversee handling of privacy incidents, complaints, and data subject requests.

Skills

Privacy governance

Risk assessments

Policy development

Privacy awareness

Stakeholder engagement

Regulatory compliance

Project management

Education

Bachelor's Degree

Tools

GRC platform

Job description

Bank of the Philippine Islands (BPI) is seeking an assistant to the Data Protection Officer to help implement timely, risk-based privacy programs and activities aligning with regulatory requirements. The role provides strategic support to the business, drive privacy governance, and promote a strong privacy culture across units.

You will develop policies, conduct assessments, and lead awareness initiatives while coordinating investigations and handling data subject requests to ensure regulatory