Data Privacy Specialist

Maxicare Healthcare Corporation; Makati; On-site; PHP 391,000 - 725,000; Full time

Job summary

Maxicare Healthcare Corporation is seeking a detail-oriented professional to support the Data Protection Officer in implementing and monitoring the Data Privacy Management Program. The role involves organizing privacy documentation, maintaining records, and ensuring version control across the DPO office.

You will assist in reviewing privacy forms, monitoring PIAs and BIAs, and coordinating with Legal and Information Security teams to ensure compliance with NPC regulations and ISO standards.

Qualifications

• 2–4 years of relevant experience in Data Privacy, Compliance, Risk Management, Information Security, Quality Management, Document Control, or a related field.
• Experience in data privacy compliance, documentation, audit, risk assessment, or regulatory monitoring is preferred.
• Experience coordinating with Legal, Compliance, Information Security, Quality, or other process owners is preferred.
• Exposure to Privacy Impact Assessments (PIA), Business Impact Analysis (BIA), data breach management, or information security practices is an advantage.
• Experience with policies, procedures, controlled documents, reports, and compliance records.
• Excellent written and verbal communication and coordination skills.

Responsibilities

• Support the Data Protection Officer (DPO) in the implementation and monitoring of the Data Privacy Management Program.
• Prepare, maintain, and monitor reports, correspondence, forms, records, and other DPO documents.
• Maintain and update reference files, masterlists, records, and documentation in accordance with DPO policies and guidelines.
• Act as Document Controller for the Data Privacy Office and ensure proper document version control and records management.
• Assist in monitoring the organization's data breach management and reporting program.
• Support privacy management initiatives, audits, and other compliance requirements as assigned.

Skills

Data Privacy

Compliance

Risk Management

Information Security

Document Control

Quality Management

Records Management

Research

Analytical Skills

Communication

Education

Bachelor’s degree in Data Privacy, Information Technology, Computer Science, Business Administration, Legal Management, Risk Management, Quality Management

Tools

Microsoft Office

Job description

Responsibilities

• Support the Data Protection Officer (DPO) in the implementation and monitoring of the Data Privacy Management Program.
• Conduct research, organize, analyze, cross-check, and validate data privacy-related information and documentation.
• Prepare, maintain, and monitor reports, correspondence, forms, records, and other DPO documents .
• Assist in the review and validation of data privacy forms, member/ data subject consent forms, and other privacy-related documents.
• Monitor the DPO Asset Register, Privacy Impact Assessments (PIAs), risk assessments, and QOT objectives, targets, and plans .
• Monitor and support the implementation of new and existing data privacy operational practices and controls .
• Assist the DPO in reviewing and monitoring new and updated data privacy laws, regulations, and NPC issuances .
• Support the conduct of Business Impact Analysis (BIA) and other privacy and compliance assessments.
• Maintain and update reference files, masterlists, records, and documentation in accordance with DPO policies and guidelines.
• Act as Document Controller for the Data Privacy Office and ensure proper document version control and records management.
• Support the validation of ISMS and DPA awareness assessments .
• Maintain and monitor data privacy requirements and documentation for third parties , including clients, vendors, processors, and affiliates.
• Support communication and coordination between the DPO, process owners, and Legal Office on privacy-related matters.
• Act as the primary message transfer agent for DPO transaction requests and communications received through the official DPO mailbox.
• Support the DPO in the organization’s information life cycle management activities.
• Assist in monitoring the organization's data breach management and reporting program .
• Support privacy management initiatives, certification activities, audits, and other compliance requirements as assigned.
• Prepare and submit Document Review Reports, Masterlists of Records, and other periodic or ad hoc reports .
• Perform other related duties and responsibilities that may be assigned by the DPO or management.

Experience

• 2–4 years of relevant experience in Data Privacy, Compliance, Risk Management, Information Security, Quality Management, Document Control, or a related field.
• Experience in data privacy compliance, documentation, audit, risk assessment, or regulatory monitoring is preferred.
• Experience working with policies, procedures, controlled documents, reports, and compliance records .
• Exposure to Privacy Impact Assessments (PIA), Business Impact Analysis (BIA), data breach management, or information security practices is an advantage.
• Experience coordinating with Legal, Compliance, Information Security, Quality, or other process owners is preferred.

Qualifications

• Bachelor’s degree in Data Privacy, Information Technology, Computer Science, Business Administration, Legal Management, Risk Management, Quality Management , or a related field.
• Knowledge of the Data Privacy Act of 2012 (RA 10173) and relevant National Privacy Commission (NPC) regulations and issuances.
• Knowledge of data privacy principles, information life cycle management, privacy risk management, and compliance monitoring .
• Familiarity with ISO 27001/ISMS, data protection agreements, Privacy Impact Assessments, and data breach management is an advantage.
• Strong research, analytical, validation, documentation, and records management skills .
• Excellent written and verbal communication and coordination skills .
• Highly organized, detail-oriented, and able to manage multiple compliance activities and deadlines.
• Proficient in Microsoft Office applications , particularly Word, Excel, and PowerPoint.
• Ability to maintain confidentiality and proper handling of sensitive and personal information .
• Certification or training in Data Privacy, Privacy Management, Information Security, ISO, or Compliance is an advantage.