Data Protection Officer

Belo Medical Group; San Juan; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Belo Medical Group in the Philippines is seeking a Data Privacy Officer to oversee the organization’s data processing activities and ensure compliance with applicable data protection laws. You will develop and implement data protection policies, conduct DPIAs, train staff, and lead incident response to safeguard personal data, while coordinating with regulators and management to maintain privacy standards.

The role requires strong governance, risk management, and the ability to translate legal

Qualifications

• Graduate in Information Technology, Information Security, or a related field.
• Certified Data Protection Officer credential.
• 3–5 years’ experience as Data Protection Officer.

Responsibilities

• Ensure compliance with data protection laws and regulations (e.g., National Privacy Commission).
• Develop and implement data protection policies, procedures and guidelines.
• Monitor adherence to privacy standards and regularly update policies.

Skills

Regulatory knowledge

Governance

Training delivery

Education

Bachelor's degree in IT/InfoSec or related field

Certified Data Protection Officer

Job description

Job Description: The Data Privacy Officer (DPO) is responsible for overseeing and ensuring the organization’s data processing activities comply with applicable data protection laws and regulations. The DPO plays a crucial role in safeguarding personal data and managing privacy risks.

Key Responsibilities:

• Ensure the organization’s compliance with data protection laws and regulations, including with the National Privacy Commission or relevant local data protection laws;
• Develop and implement data protection policies, procedures, and guidelines;
• Monitor adherence to data protection standards within the organization and regularly review and update policies to maintain compliance;
• Conduct regular training sessions and workshops for employees to ensure awareness and understanding of data protection principles;
• Promote a culture of data privacy within the organization by leading initiatives to raise awareness;
• Conduct Data Privacy Impact Assessments for new projects, processes, or technologies to identify and mitigate potential data privacy risks;
• Serve as the primary point of contact for data breaches and incidents;
• Investigate data breaches and incidents, and implement corrective actions to prevent future occurrences;
• Coordinate the response to data breaches, including notification to the relevant authorities and affected individuals, as needed;
• Act as the point of contact between the organization and the National Privacy Commission;
• Ensure timely and accurate reporting to regulatory authorities, including data breach notifications;
• Provide advice to Senior Management and other departments on data protection and privacy issues;
• Work with our legal counsel on review of contacts, agreements, and data processing activities to ensure compliance with data protection laws;
• Maintain records of all data processing activities within the organization;
• Keep up-to-date with changes in data protection laws and best practices;
• Continuously assess and improve the organization’s data protection framework to adapt to evolving legal requirements and technological advancements;
• Conduct regular audits of data processing activities to ensure compliance with data protection policies and legal requirements;
• Identify areas of improvement and implement corrective actions where necessary;
• Provide regular reports to the Management on data protection compliance, risks, and incidents.

Qualifications:

• Graduate of Information Technology, Information Security, or a related field;
• Certified Data Protection Officer
• At least with 3-5 years’ experience as Data Protection Officer