Data Protection Officer

One Top Medical Systems Resources OPC; Philippines; On-site; PHP 480,000 - 600,000; Full time

Job summary

One Top Medical Systems Resources OPC is seeking a Regulatory Compliance & Oversight professional in the Philippines to ensure adherence to the Data Privacy Act of 2012, maintain records of processing activities, and draft/advise on privacy policies. You will train staff, liaise with authorities, and participate in structured DPO training to elevate data protection capabilities.

The role emphasizes policy development, stakeholder communication, and a proactive privacy culture across all units.

Qualifications

• Bachelor’s degree in business administration, Office Administration, or Information Technology.
• At least 1 year of experience in office administration/management, organizational communications, IT or related fields.
• Prior experience in an administrative, legal, audit, risk management, or IT role.
• Foundational knowledge of the Data Privacy Act of 2012.
• Strong project management skills and the ability to work effectively within fixed timelines.
• Proficiency with standard office productivity tools, specifically Microsoft Word, Excel, and PowerPoint.
• Excellent verbal and written communication skills with a strong attention to detail.
• Proven ability to handle, manage, and protect sensitive and highly confidential information.

Responsibilities

• Serve as the primary point of contact within the organization for staff, technical consultants, and security consultants regarding data protection issues and other IT related tasks.
• Act as the official liaison and point of contact for external data protection authorities and regulators.
• Deliver data privacy awareness and training across all business units to staff members involved in data handling or processing.
• Promote a proactive culture of data protection and compliance across all levels of the company.
• Provide continuous data protection advice and policy guidance to staff members.
• Undergo structured on-the-job training from DPO-ACE certified technical and security consultants to actively build up and elevate DPO skill levels.

Skills

Project management

Data privacy knowledge

Communication skills

Record keeping

Education

Bachelor’s degree in business administration/Office Administration/IT

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

REGULATORY COMPLIANCE & OVERSIGHT

• Ensure all company policies and data collection processes strictly comply with the provisions of R.A. 10173, the Data Privacy Act of 2012.
• Maintain detailed and comprehensive records of all data processing activities conducted by the company.

POLICY & ASSESSMENT DEVELOPMENT

• Draft new and amend existing internal data protection policies, guidelines, and procedures in consultation with stakeholders and consultants.
• Develop and update privacy policies, privacy impact assessments, and privacy management plans to manage organizational data risks.

STAKEHOLDER COMMUNICATION & LIAISON

• Serve as the primary point of contact within the organization for staff, technical consultants, and security consultants regarding data protection issues and other I.T. related tasks
• Act as the official liaison and point of contact for external data protection authorities and regulators.

TRAINING & CULTURE PROMOTION

• Deliver data privacy awareness and training across all business units to staff members involved in data handling or processing.
• Promote a proactive culture of data protection and compliance across all levels of the company.
• Provide continuous data protection advice and policy guidance to staff members.

PROFESSIONAL DEVELOPMENT

• Undergo structured on-the-job training from DPO-ACE certified technical and security consultants to actively build up and elevate DPO skill levels.

Qualification:

1. A bachelor’s degree in business administration, Office Administration, or Information Technology
2. At least 1 year of experience in office administration/management, organizational communications, I.T. or related fields
3. Prior experience in an administrative, legal, audit, risk management, or I.T role.
4. Foundational knowledge of the R.A. 10173 Data Privacy Act of 2012.
5. Strong project management skills and the ability to work effectively within fixed timelines.
6. Proficiency with standard office productivity tools, specifically Microsoft Word, Excel, and PowerPoint.
7. Excellent verbal and written communication skills with a strong attention to detail.
8. Proven ability to handle, manage, and protect sensitive and highly confidential information.
9. A high level of patience and a good attitude when communicating across various business units.