Data Protection Officer

Paynamics; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Paynamics Technologies Inc. is seeking a senior privacy and compliance professional to lead regulatory adherence, PIAs, and vendor privacy.

You will design and maintain privacy programs, collaborate across Product, IT, and Security, and act as liaison with NPC for inquiries, audits, and enforcement actions. The role includes incident management, policy updates, training, and reporting to senior management and regulators.

Qualifications

• Education: Bachelor's degree in Law, Information Security, IT, CS, or related field.

Responsibilities

• Monitor and interpret data protection laws and regulatory guidance.
• Develop, review, and maintain privacy policies, procedures and notices.
• Conduct PIAs and risk assessments across projects, products, and vendors.
• Collaborate with Product, IT and Security for privacy-by-design controls.
• Oversee data breach incident response and regulatory reporting.
• Deliver privacy training across the organization.
• Prepare compliance reports for management and regulators.
• Engage NPC inquiries, complaints, audits and enforcement actions.

Skills

Privacy compliance

Regulatory knowledge

Risk management

Incident management

Data protection

Education

Bachelor's degree in Law/Information Security/IT/CS/Business

Advanced degree in Privacy/Compliance

Tools

CIPP/E

CIPM

CIPT

NPC-approved DPO

Job description

Join Our Team at Paynamics Technologies Inc.

Company Description

As a BSP-licensed Electronic Money Issuer and Registered Operator of Payment Systems, Paynamics is a trusted leader in the fintech space.

We deliver end-to-end payment infrastructure that empowers every layer of the economyfrom SMEs and conglomerates to government agencies and financial institutions. Whether its payment acceptance, disbursement, or full wallet ecosystems, our modular platforms are designed to address the complexities of scale, compliance, and interoperability.

Through our secure and innovative technologies, we help shape and empower the Philippines digital landscapedriving financial inclusion, enabling digital transformation, and building a more connected, digital-first economy.

Responsibilities:

A. Regulatory Compliance & Policy

• Monitor and interpret applicable data protection laws and regulatory guidance (e.g., Data Privacy Act, NPC Circulars).
• Develop, review, and maintain the companys privacy policies, procedures, standards, and privacy notices.
• Conduct Privacy Impact Assessments (PIAs) and risk assessments on processing activities, projects, products, and vendors.
• Collaborate with Product, IT, and Security teams to ensure privacy-by-design controls.

C. Incident and Breach Management

• Oversee or support data breach incident response, including investigation, containment, reporting, and notification to affected individuals and NPC within legal deadlines.

D. Training, Awareness & Culture

• Design and deliver organization-wide training on privacy principles, internal procedures, and regulatory updates.

E. Monitoring, Audits & Reporting

• Perform regular audits and compliance checks to ensure adherence to internal and external requirements.
• Prepare compliance reports for senior management and regulators.

F. Stakeholder & Regulator Engagement

• Serve as primary liaison for NPC inquiries, complaints, audits, and enforcement actions.
• Respond to data subject access requests (DSARs) and other rights requests under privacy law.

G. Documentation & Contracts

• Maintain accurate records of processing activities (ROPA) and compliance artifacts.
• Review contracts and data processing agreements to ensure privacy provisions and safeguards are included

QUALIFICATIONS:

• Education: Bachelors degree in Law, Information Security, IT, Computer Science, Business, or related field. Advanced degrees (e.g., Juris Doctor or Masters in Privacy/Compliance) are advantageous.
• Experience: 3–7+ years in privacy, compliance, risk management, legal, or related roles; fintech or financial services experience preferred.
• Certifications (Preferred): CIPP/E, CIPM, CIPT, or NPC-approved DPO certification.
• Technical/Functional Skills:
• Strong knowledge of Philippine and international data protection frameworks (Data Privacy Act, GDPR).
• Incident management and breach reporting.
• Contract/data sharing and vendor compliance review.

By applying, you authorize the company to process your personal information solely for recruitment purposes, in accordance with applicable data protection regulations.