Global Data Privacy Program Lead

Grant Thornton (US); Makati; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Grant Thornton (US) in the Philippines is seeking a Privacy Program professional to support governance, risk management, and regulatory compliance across data privacy initiatives. The role partners with Legal, IT, Risk, and Compliance to implement privacy by design and manage DPIAs, risk registers, and incident responses.

You will contribute to global privacy programs, coordinate with authorities, and promote data protection awareness within the organization.

Qualifications

• Bachelor degree in a relevant field with focus on privacy, law, IT, or security.
• 5+ years implementing privacy processes in global organizations.
• Certifications such as CISSP/CISM/CISA preferred.
• Experience in professional services organizations is a plus.
• Excellent verbal and written communication skills.

Responsibilities

• Support design, implementation, and improvement of privacy compliance framework.
• Assist governance mechanisms, policies, and controls for data processing.
• Monitor compliance with privacy laws and organizational requirements.
• Provide guidance to business teams on privacy obligations.
• Create and update Records of Processing Activities (ROPAs) for GCS and global operations.
• Help implement GTA incident reporting policy and related technologies.
• Coordinate meetings and internal information requests.
• Support privacy reviews of products and services.
• Serve as local privacy compliance resource for Philippine data protection matters.
• Coordinate privacy registrations and regulatory submissions as required.
• Monitor regulatory developments and update internal processes.
• Contribute to privacy risk management including PIAs and risk registers.
• Maintain privacy risk registers and remediation tracking.
• Assist in incident investigation and notification requirements.
• Support global privacy operations and cross-border privacy governance programs.
• Review vendor privacy practices and data processing agreements.
• Develop and deliver privacy awareness training.
• Assist with audits, evidence gathering, and KPI reporting.
• Establish privacy performance metrics and governance reports.

Skills

Privacy governance

Regulatory compliance

Stakeholder management

Communication

Project management

Risk assessment

Data protection

Education

Bachelor's degree in law or IT or information security

Postgraduate qualification in Data Privacy, Law, Compliance, Risk Management, or Information Security

CISSP/CISM/CISA preferred

PMP or similar certification

AI product development experience

Travel 5%

Job description

Grant Thornton (US) in the Philippines is seeking a Privacy Program professional to support governance, risk management, and regulatory compliance across data privacy initiatives. The role partners with Legal, IT, Risk, and Compliance to implement privacy by design and manage DPIAs, risk registers, and incident responses.

You will contribute to global privacy programs, coordinate with authorities, and promote data protection awareness within the organization.