Data Protection Officer

Belo Medical Group, Inc.; San Juan; On-site; PHP 800,000 - 1,100,000; Full time

Job summary

Belo Medical Group, Inc. is seeking a Data Privacy Officer to safeguard personal data and oversee regulatory compliance in its Philippine operations. You will lead privacy governance, risk assessments, and training initiatives across the organization.

You will coordinate with legal and management to ensure timely breach notifications and continuous improvement of the data protection framework in response to evolving laws and technologies.

Qualifications

• Graduate of Information Technology, Information Security, or a related field.
• Certified Data Protection Officer.
• At least 3–5 years’ experience as Data Protection Officer.

Responsibilities

• Ensure compliance with data protection laws and regulations, including with the National Privacy Commission or local equivalents.
• Develop and implement data protection policies, procedures, and guidelines.
• Monitor adherence to data protection standards within the organization and review policies regularly.
• Conduct regular training sessions for employees on data protection principles.
• Lead data privacy initiatives to raise awareness and promote a privacy-first culture.
• Conduct Data Privacy Impact Assessments for new projects or technologies to identify risks.
• Serve as the primary contact for data breaches and incidents and coordinate responses.

Skills

Data privacy awareness

Regulatory compliance

Communication skills

Education

Bachelor’s degree in Information Technology or Information Security

Certified Data Protection Officer

Job description

Job Description: The Data Privacy Officer (DPO) is responsible for overseeing and ensuring the organization’s data processing activities comply with applicable data protection laws and regulations. The DPO plays a crucial role in safeguarding personal data and managing privacy risks.

Key Responsibilities:

• Ensure the organization’s compliance with data protection laws and regulations, including with the National Privacy Commission or relevant local data protection laws;
• Develop and implement data protection policies, procedures, and guidelines;
• Monitor adherence to data protection standards within the organization and regularly review and update policies to maintain compliance;
• Conduct regular training sessions and workshops for employees to ensure awareness and understanding of data protection principles;
• Promote a culture of data privacy within the organization by leading initiatives to raise awareness;
• Conduct Data Privacy Impact Assessments for new projects, processes, or technologies to identify and mitigate potential data privacy risks;
• Serve as the primary point of contact for data breaches and incidents;
• Investigate data breaches and incidents, and implement corrective actions to prevent future occurrences;
• Coordinate the response to data breaches, including notification to the relevant authorities and affected individuals, as needed;
• Act as the point of contact between the organization and the National Privacy Commission;
• Ensure timely and accurate reporting to regulatory authorities, including data breach notifications;
• Provide advice to Senior Management and other departments on data protection and privacy issues;
• Work with our legal counsel on review of contacts, agreements, and data processing activities to ensure compliance with data protection laws;
• Maintain records of all data processing activities within the organization;
• Keep up-to-date with changes in data protection laws and best practices;
• Continuously assess and improve the organization’s data protection framework to adapt to evolving legal requirements and technological advancements;
• Conduct regular audits of data processing activities to ensure compliance with data protection policies and legal requirements;
• Identify areas of improvement and implement corrective actions where necessary;
• Provide regular reports to the Management on data protection compliance, risks, and incidents.

Qualifications:

• Graduate of Information Technology, Information Security, or a related field;
• Certified Data Protection Officer
• At least with 3-5 years’ experience as Data Protection Officer