Healthcare Data Privacy Lead - Compliance & Security

Metropolitan Medical Center; Manila; On-site; PHP 900,000 - 2,000,000; Full time

Job summary

Metropolitan Medical Center seeks a Senior Privacy & Compliance Officer to lead the hospital’s data privacy and governance program, ensuring adherence to the Philippine Data Privacy Act and NPC regulations. The role focuses on protecting PHI across clinical and business operations and guiding privacy strategy.

The incumbent will conduct Privacy Impact Assessments for EHR and other healthcare technologies, manage third-party privacy risk, and lead data breach investigations with NPC

Qualifications

• Bachelor’s degree in IT, Information Security, Nursing Informatics, Healthcare Administration, or related field.
• Mandatory CDPO certification.
• Strong knowledge of Philippine privacy law and healthcare privacy.
• Excellent executive communication and stakeholder management.

Responsibilities

• Lead the hospital’s data privacy and governance program and ensure compliance with PH Data Privacy Act and NPC regulations.
• Protect PHI and sensitive data across clinical and business operations.
• Conduct Privacy Impact Assessments for EHR, lab, diagnostics, and healthcare technologies.
• Review Data Sharing and outsourcing agreements for privacy compliance.
• Lead data breach investigations and NPC notifications.
• Oversee patient privacy rights and medical record privacy processes.
• Supervise COPs and conduct internal privacy audits.
• Develop and deliver privacy training for employees and clinicians.
• Support EHR innovation and cross-border telemedicine initiatives.

Skills

Privacy governance

Stakeholder management

Executive communication

Diplomacy

Education

Bachelor’s degree in IT/Information Security/Healthcare Administration/Law

Advanced degree preferred

Tools

CDPO Certification

CIPP/E

CISM

CISSP

Job description

Metropolitan Medical Center seeks a Senior Privacy & Compliance Officer to lead the hospital’s data privacy and governance program, ensuring adherence to the Philippine Data Privacy Act and NPC regulations. The role focuses on protecting PHI across clinical and business operations and guiding privacy strategy.

The incumbent will conduct Privacy Impact Assessments for EHR and other healthcare technologies, manage third-party privacy risk, and lead data breach investigations with NPC