Data Protection & Technology Senior Associate (EMEA/US Shift)

AleraInfoTech; Metro Manila; Hybrid; PHP 800,000 - 1,500,000; Full time

Job summary

DTCC in Manila is seeking a Data Protection & Technology Senior Associate to join the global privacy program. The role supports regulatory compliance across lines of business and DTCC subsidiaries worldwide in a hybrid work setting.

Responsibilities include monitoring privacy laws, performing privacy impact assessments, handling inquiries, and assisting with training and data subject access requests. Strong background in data privacy, audit, and information security is essential.

Qualifications

• Minimum of 6 years of related experience.
• Bachelor’s degree preferred or equivalent experience.
• Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.).
• Relevant experience to include (data privacy, audit, information security, risk management).

Responsibilities

• Keep abreast of and maintain a current understanding of global data privacy laws and regulatory requirements that apply to DTCC and its companies.
• Conduct DTCC’s annual privacy inventory of data and processing activities, performing PIA and DPIAs.
• Manage and respond to inquiries received in the privacy mailbox and provide consultation, guidance, or escalation as needed.
• Perform privacy vendor evaluations to assess regulatory and privacy risks and practices associated with the onboarding of third parties.
• Liaise with business lines to identify privacy risk areas and determine appropriate privacy controls to limit privacy risks to new projects, cloud housing initiatives and/or special projects.
• Draft and/or maintain DTCC privacy policies, procedures and guidelines as needed. Assist other business lines with policies that may have an impact to individual’s privacy (e.g., employee handbook, technology usage, social media policy, etc.)
• Assist in the review of changes to applicable laws and regulations and interpretation of impact to DTCC and its companies.
• Assist with annual privacy training and ongoing awareness program.
• Assist with procedures to address Data Subject Access Requests
• Assist with the annual review of monitoring policies to prevent the loss of personal data/data leakage prevention monitoring.
• Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk; elevate appropriately.
• Keep current on evolving technologies (e.g., AI) and the associated risks and impact to data protection.
• Assist with data breach investigations, management reporting, and trend analysis impacting data privacy and/or client confidentiality.
• Support other daily program elements as needed.
• NOTE:? The Primary Responsibilities of this role are not limited to the details above.

Skills

Data privacy

Audit

Information security

Risk management

Education

Bachelor's degree

CIPM/CIPP/CISSP certifications

Job description

Data Protection & Technology Senior Associate (EMEA/US Shift)

Location: Manila, | Type: Direct hire | Work Mode: Hybrid

Salary: Salary – Php 800k to Php1.5M.

Experience: Associate

Start Date: To be decided

Full Job Overview

• Being a member of the Data Protection team, this position will support the efforts of Data Protection and Technology Services to ensure DTCC\’s adherence to regulatory and legal data protection and privacy requirements, supporting all lines of businesses and across all functional areas of DTCC and its companies globally.

RESPONSIBILITIES

• Keep abreast of and maintain a current understanding of global data privacy laws and regulatory requirements that apply to DTCC and its companies.
• Conduct DTCC’s annual privacy inventory of data and processing activities, performing PIA and DPIAs.
• Manage and respond to inquiries received in the privacy mailbox and provide consultation, guidance, or escalation as needed.
• Perform privacy vendor evaluations to assess regulatory and privacy risks and practices associated with the onboarding of third parties.
• Liaise with business lines to identify privacy risk areas and determine appropriate privacy controls to limit privacy risks to new projects, cloud hosing initiatives and/or special projects.
• Draft and/or maintain DTCC privacy policies, procedures and guidelines as needed. Assist other business lines with policies that may have an impact to individual’s privacy (e.g., employee handbook, technology usage, social media policy, etc.)
• Assist in the review of changes to applicable laws and regulations and interpretation of impact to DTCC and its companies.
• Assist with annual privacy training and ongoing awareness program.
• Assist with procedures to address Data Subject Access Requests
• Assist with the annual review of monitoring policies to prevent the loss of personal data/data leakage prevention monitoring.
• Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk; elevate appropriately.
• Keep current on evolving technologies (e.g., AI) and the associated risks and impact to data protection.
• Assist with data breach investigations, management reporting, and trend analysis impacting data privacy and/or client confidentiality.
• Support other daily program elements as needed.
• NOTE:? The Primary Responsibilities of this role are not limited to the details above. **

QUALIFICATIONS

• Minimum of 6 years of related experience
• Bachelor\’s degree preferred or equivalent experience.
• Relevant industry certification (e.g., CIPM, CIPP EU/A/C/US, CISSP, etc.
• Relevant experience to include (e.g, data privacy, audit, information security, risk management, etc.)

ABOUT DTCC

With 50 years of experience, DTCC is the premier post-trade market infrastructure for the global financial services industry. From 20 locations around the world, DTCC, through its subsidiaries, automates, centralizes, and standardizes the processing of financial transactions, mitigating risk, increasing transparency, enhancing performance, and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. Industry owned and governed, the firm innovates purposefully, simplifying the complexities of clearing, settlement, asset servicing, transaction processing, trade reporting and data services across asset classes and bringing increased security, enhanced resilience, and soundness to financial markets. In 2022, DTCC’s subsidiaries processed securities transactions valued at U.S. $2.5 quadrillion and its depository subsidiary provided custody and asset servicing for securities issues from over 150 countries and territories valued at U.S. $72 trillion. DTCC’s Global Trade Repository service, through locally registered, licensed, or approved trade repositories, processes more than 17.5 billion messages annually.