Data Protection Officer

Tasq Work; Pasig; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Tasq Work is seeking a Risk & Compliance Officer to safeguard BPO operations in Ortigas onsite. You will ensure regulatory alignment, client contractual obligations, data privacy standards, and internal risk controls across cross-functional teams.

Reporting to the Head of Governance and Infrastructure, you’ll lead risk assessments, oversee compliance programs, support audits, and foster a culture of ethics and accountability within operations, HR, IT, and legal.

Qualifications

• Bachelor’s degree in business, Law, Finance, Information Security, or related field.
• 2 to 5+ years of experience in risk management, compliance, audit, or quality within a BPO organization.
• Knowledge of BPO operations, client SLA compliance, and process workflows.
• Strong understanding of data privacy laws and information security standards (ISO 27001, SOC 2).
• Strong analytical, documentation, and problem-solving skills.
• Excellent communication skills for internal coordination and client interactions.

Responsibilities

• Conduct regular risk assessments across operational, financial, data security, and business continuity domains.
• Support development and maintenance of the Enterprise Risk Management framework.
• Perform root-cause analysis, incident reviews, and control testing.
• Coordinate with operations to identify risks in workflows and SLAs for new clients.
• Prepare compliance and risk reports for leadership and external auditors.

Skills

Regulatory compliance

Risk management

Data privacy

Auditing

Communication

Cross-functional coordination

Education

Bachelor’s degree in business, Law, Finance, Information Security, or related field

Tools

ISO 27001

SOC 2

NPC guidelines

Job description

Location: Ortigas (Onsite)

Schedule: Mid-shift

The Risk & Compliance Officer supports the organization by ensuring that all business process outsourcing (BPO) operations comply with regulatory requirements, client contractual obligations, data privacy standards, and internal risk controls. Reporting to the Head of Governance and Infrastructure, the role focuses on managing operational risks, monitoring compliance with industry best practices, and ensuring adherence to global client and local Philippine regulations. This position requires strong coordination with operations, HR, IT, legal, and client compliance teams.

QUALIFICATIONS:

• Bachelor’s degree in business, Law, Finance, Information Security, or a related field.
• 2 to 5+ years of experience inrisk management, compliance, audit, or qualitywithin aBPO organization.
• Knowledge of BPO operations, client SLA compliance, and process workflows.
• Strong understanding of:
  • Data Privacy Act & NPC guidelines
  • ISO 27001, SOC 2, or other InfoSec standards (a plus)
  • Regulatory requirements affecting BPOs (labor, tax, data privacy)
• Strong analytical, documentation, and problem-solving skills.
• Excellent communication skills for both internal coordination and client interactions.
• Ability to work with cross-functional teams in a fast-paced BPO environment.

Key Responsibilities

1. Risk Management

• Conduct regular assessments of operational, financial, data security, and business continuity risks in BPO operations.
• Support the development and maintenance of the Enterprise Risk Management (ERM) framework.
• Perform process risk reviews, incident root‑cause analysis, and control effectiveness testing.
• Manage risk registers and support the implementation of mitigation plans.
• Coordinate with operations teams to identify risks in workflows, SLAs, and new client implementations.

2. Compliance Oversight

• Ensure compliance with client‑specific requirements, data privacy agreements, and industry regulations such as:
  • Philippine Data Privacy Act (NPC)
  • ISO 27001 / SOC 2standards (if applicable)
  • DOLE, SEC, BIRregulations
  • Client‑mandated compliance frameworks
• Conduct internal compliance checks, policy reviews, and operational audits.
• Review vendor risks and ensure third‑party compliance.

3. Information Security & Data Privacy

• Work closely with the Information Security team to enforce security policies and procedures.
• Participate in data privacy impact assessments (DPIA) and breach incident investigations.
• Ensure compliance with data handling, access control, and confidentiality guidelines.

4. Governance & Reporting

• Prepare compliance and risk reports for leadership, clients, and external auditors.
• Assist in internal and external audit preparation, documentation, and corrective action tracking.
• Participate in client due diligence, compliance calls, and contract reviews.

5. Training & Culture Building

• Conduct compliance and risk training for employees, supervisors, and new hires.
• Support awareness programs on data privacy, information security, fraud prevention, and ethical conduct.
• Promote a culture of risk awareness and compliance across teams.