Data Privacy Specialist

Maxicare Healthcare Corporation; Makati; On-site; PHP 600,000 - 800,000; Full time

Job summary

Maxicare Healthcare Corporation seeks a detail-oriented professional to assist the DPO in implementing and monitoring the Data Privacy Management Program. You will organize privacy-related information, validate records, and maintain DPO documents and controls.

You will support risk assessments, PIAs, and data breach monitoring while coordinating with Legal and Compliance teams to ensure regulatory alignment.

Qualifications

• Bachelor’s degree in a related field (e.g., Data Privacy, IT, CS, Business Admin, Legal Management).
• Knowledge of Data Privacy Act and NPC regs.
• Familiarity with ISO ISMS and data breach management is a plus.

Responsibilities

• Assist the DPO in implementing and monitoring the Data Privacy Management Program.
• Organize and validate privacy-related information and records.
• Maintain DPO documents, forms, and reports.
• Act as document controller for DPO policies and records management.
• Support privacy risk assessments, PIAs, and data breach monitoring.

Skills

Data privacy

Compliance

Risk management

Information security

Quality management

Document control

Policies & procedures

Coordination

Education

Bachelor’s degree in Data Privacy

Bachelor’s degree in Information Technology

Bachelor’s degree in Computer Science

Bachelor’s degree in Business Administration

Bachelor’s degree in Legal Management

Bachelor’s degree in Risk Management

Bachelor’s degree in Quality Management

Tools

Microsoft Word

Microsoft Excel

Microsoft PowerPoint

Job description

Job Description:

Responsibilities

• Support the Data Protection Officer (DPO) in the implementation and monitoring of the Data Privacy Management Program.
• Conduct research, organize, analyze, cross-check, and validate data privacy-related information and documentation.
• Prepare, maintain, and monitor reports, correspondence, forms, records, and other DPO documents .
• Assist in the review and validation of data privacy forms, member/ data subject consent forms, and other privacy-related documents.
• Monitor the DPO Asset Register, Privacy Impact Assessments (PIAs), risk assessments, and QOT objectives, targets, and plans .
• Monitor and support the implementation of new and existing data privacy operational practices and controls .
• Assist the DPO in reviewing and monitoring new and updated data privacy laws, regulations, and NPC issuances .
• Support the conduct of Business Impact Analysis (BIA) and other privacy and compliance assessments.
• Maintain and update reference files, masterlists, records, and documentation in accordance with DPO policies and guidelines.
• Act as Document Controller for the Data Privacy Office and ensure proper document version control and records management.
• Support the validation of ISMS and DPA awareness assessments .
• Maintain and monitor data privacy requirements and documentation for third parties , including clients, vendors, processors, and affiliates.
• Support communication and coordination between the DPO, process owners, and Legal Office on privacy-related matters.
• Act as the primary message transfer agent for DPO transaction requests and communications received through the official DPO mailbox.
• Support the DPO in the organization’s information life cycle management activities.
• Assist in monitoring the organization’s data breach management and reporting program .
• Support privacy management initiatives, certification activities, audits, and other compliance requirements as assigned.
• Prepare and submit Document Review Reports, Masterlists of Records, and other periodic or ad hoc reports .
• Perform other related duties and responsibilities that may be assigned by the DPO or management.

Experience

• 2–4 years of relevant experience in Data Privacy, Compliance, Risk Management, Information Security, Quality Management, Document Control, or a related field.
• Experience in data privacy compliance, documentation, audit, risk assessment, or regulatory monitoring is preferred.
• Experience working with policies, procedures, controlled documents, reports, and compliance records .
• Exposure to Privacy Impact Assessments (PIA), Business Impact Analysis (BIA), data breach management, or information security practices is an advantage.
• Experience coordinating with Legal, Compliance, Information Security, Quality, or other process owners is preferred.

Qualifications

• Bachelor’s degree in Data Privacy, Information Technology, Computer Science, Business Administration, Legal Management, Risk Management, Quality Management , or a related field.
• Knowledge of the Data Privacy Act of 2012 (RA 10173) and relevant National Privacy Commission (NPC) regulations and issuances.
• Knowledge of data privacy principles, information life cycle management, privacy risk management, and compliance monitoring .
• Familiarity with ISO 27001/ISMS, data protection agreements, Privacy Impact Assessments, and data breach management is an advantage.
• Strong research, analytical, validation, documentation, and records management skills .
• Excellent written and verbal communication and coordination skills .
• Highly organized, detail-oriented, and able to manage multiple compliance activities and deadlines.
• Proficient in Microsoft Office applications , particularly Word, Excel, and PowerPoint.
• Ability to maintain confidentiality and proper handling of sensitive and personal information .
• Certification or training in Data Privacy, Privacy Management, Information Security, ISO, or Compliance is an advantage.