HEAD DATA PRIVACY PROGRAM DPP 2

Bank of the Philippine Islands (BPI); Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Bank of the Philippine Islands (BPI) is seeking an assistant to the Data Protection Officer to help implement timely, risk-based privacy programs and activities aligning with regulatory requirements. The role provides strategic support to the business, drive privacy governance, and promote a strong privacy culture across units.

You will develop policies, conduct assessments, and lead awareness initiatives while coordinating investigations and handling data subject requests to ensure regulatory

Qualifications

• Experience in data privacy or compliance.
• At least 1-year exposure to banking operations.
• Knowledge of Data Privacy Act of 2012 and related regulations.
• Understanding of data protection principles and practices.

Responsibilities

• Assist the Data Protection Officer in implementing privacy programs and risk-based activities.
• Manage privacy programs and the GRC platform for policy compliance.
• Provide privacy governance and advisory support to business units.
• Develop privacy policies, standards, assessment tools, and management reports.
• Lead privacy awareness initiatives, trainings, and stakeholder engagement.
• Oversee handling of privacy incidents, complaints, and data subject requests.

Skills

Privacy governance

Risk assessments

Policy development

Privacy awareness

Stakeholder engagement

Regulatory compliance

Project management

Education

Bachelor's Degree

Tools

GRC platform

Job description

Job Description:

Assists the Data Protection Officer in the effective implementation of timely, relevant, and risk-based data privacy programs, initiatives, and activities to ensure compliance with applicable regulatory requirements, strengthen data protection practices, and provide strategic and operational support to the business.

Duties And Responsibilities

• Manage data privacy programs, special projects, and the Governance, Risk, and Compliance (GRC) platform to ensure effective implementation of the Bank's privacy framework and compliance with the Data Privacy Act.
• Provide privacy governance and advisory support to business units through privacy risk assessments, contract reviews, privacy impact assessments, and policy development to ensure appropriate processing and protection of personal data.
• Develop data privacy policies, standards, assessment tools, and management reports to strengthen compliance monitoring and support informed decision-making by Senior Management and the Board.
• Lead privacy awareness initiatives, training programs, and stakeholder engagement activities to promote a strong privacy culture and reinforce accountability in protecting personal information.
• Oversee the handling of privacy incidents, complaints, and data subject requests by coordinating investigations, assessing reporting obligations, and recommending corrective actions to ensure regulatory compliance and effective risk mitigation.

Qualifications

• Prior experience in data privacy or compliance and regulatory management and at least 1-year exposure to banking operations
• Bachelor's Degree
• Knowledgeable in Data Privacy Act of 2012 and related regulations, Data protection principles and practices, Data privacy risk management, Banking operations and business processes, Compliance and regulatory management, Project management methodologies