Data Protection Officer

Belo Medical Group, Inc.; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Belo Medical Group, Inc. seeks a Data Privacy Officer to oversee the organization’s data processing activities and ensure compliance with applicable data protection laws. The role focuses on safeguarding personal data and managing privacy risks across the company’s operations.

The DPO will develop policies, conduct training, lead privacy initiatives, and coordinate breach response with regulatory authorities. A Certified Data Protection Officer and 3–5 years of DPO experience are required.

Qualifications

• Graduate of Information Technology or Information Security (or related field).
• Certified Data Protection Officer.
• 3–5 years’ experience as Data Protection Officer.

Responsibilities

• Ensure the organization’s compliance with data protection laws and regulations, including with the National Privacy Commission or relevant local data protection laws.
• Develop and implement data protection policies, procedures, and guidelines.
• Monitor adherence to data protection standards within the organization and regularly review and update policies to maintain compliance.
• Conduct regular training sessions and workshops for employees to ensure awareness and understanding of data protection principles.
• Promote a culture of data privacy within the organization by leading initiatives to raise awareness.
• Conduct Data Privacy Impact Assessments for new projects, processes, or technologies to identify and mitigate potential data privacy risks.
• Serve as the primary point of contact for data breaches and incidents.
• Investigate data breaches and incidents, and implement corrective actions to prevent future occurrences.
• Coordinate the response to data breaches, including notification to the relevant authorities and affected individuals, as needed.
• Act as the point of contact between the organization and the National Privacy Commission.
• Maintain records of all data processing activities within the organization.
• Keep up-to-date with changes in data protection laws and best practices.
• Continuously assess and improve the organization’s data protection framework to adapt to evolving legal requirements and technological advancements.
• Conduct regular audits of data processing activities to ensure compliance with data protection policies and legal requirements.
• Identify areas of improvement and implement corrective actions where necessary.
• Provide regular reports to the Management on data protection compliance, risks, and incidents.

Skills

Data privacy

Regulatory compliance

Policy development

Training

Education

Information Technology / Information Security

Job description

Job Description

The Data Privacy Officer (DPO) is responsible for overseeing and ensuring the organization’s data processing activities comply with applicable data protection laws and regulations. The DPO plays a crucial role in safeguarding personal data and managing privacy risks.

Job Description

The Data Privacy Officer (DPO) is responsible for overseeing and ensuring the organization’s data processing activities comply with applicable data protection laws and regulations. The DPO plays a crucial role in safeguarding personal data and managing privacy risks.

Key Responsibilities

• Ensure the organization’s compliance with data protection laws and regulations, including with the National Privacy Commission or relevant local data protection laws;
• Develop and implement data protection policies, procedures, and guidelines;
• Monitor adherence to data protection standards within the organization and regularly review and update policies to maintain compliance;
• Conduct regular training sessions and workshops for employees to ensure awareness and understanding of data protection principles;
• Promote a culture of data privacy within the organization by leading initiatives to raise awareness;
• Conduct Data Privacy Impact Assessments for new projects, processes, or technologies to identify and mitigate potential data privacy risks;
• Serve as the primary point of contact for data breaches and incidents;
• Investigate data breaches and incidents, and implement corrective actions to prevent future occurrences;
• Coordinate the response to data breaches, including notification to the relevant authorities and affected individuals, as needed;
• Act as the point of contact between the organization and the National Privacy Commission;
• Ensure timely and accurate reporting to regulatory authorities, including data breach notifications;
• Provide advice to Senior Management and other departments on data protection and privacy issues;
• Work with our legal counsel on review of contacts, agreements, and data processing activities to ensure compliance with data protection laws;
• Maintain records of all data processing activities within the organization;
• Keep up-to-date with changes in data protection laws and best practices;
• Continuously assess and improve the organization’s data protection framework to adapt to evolving legal requirements and technological advancements;
• Conduct regular audits of data processing activities to ensure compliance with data protection policies and legal requirements;
• Identify areas of improvement and implement corrective actions where necessary;
• Provide regular reports to the Management on data protection compliance, risks, and incidents.

Qualifications

• Graduate of Information Technology, Information Security, or a related field;
• Certified Data Protection Officer
• At least with 3-5 years’ experience as Data Protection Officer