Legal Counsel – Compliance & Data Protection

PM Consulting; Makati; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

PM Consulting is seeking a qualified and self-reliant Legal Counsel to join its international in-house legal team, focusing on compliance, data protection, and privacy. You will support global privacy and compliance functions and provide practical legal guidance across jurisdictions.

The role requires a commercially minded lawyer who can work independently, manage multiple priorities, and navigate complex regulatory requirements within an international business environment.

Qualifications

• Common law-qualified lawyer with 3–6+ years post-qualification experience.
• Experience advising on data protection and privacy matters.
• Strong English drafting capabilities and communication.

Responsibilities

• Support data protection, privacy & AI governance programs across jurisdictions.
• Translate legal obligations into practical guidance for business stakeholders.
• Review data processing agreements and international data transfers.
• Assist privacy incident handling and investigations as needed.
• Collaborate with IT, HR, and other stakeholders on privacy and governance matters.

Skills

Data Protection

Privacy Compliance

GDPR Knowledge

Contract Review & Negotiation

Regulatory Compliance

Legal Research

Independent Judgment

Job description

Role Overview

We are seeking a qualified and self-reliant Legal Counsel to join an international in-house legal team, with a primary focus on compliance, data protection, and privacy.

The role will support the organization's global privacy and compliance functions, working closely with senior legal stakeholders and business teams across multiple jurisdictions. The successful candidate will provide practical legal guidance on privacy, regulatory compliance, and governance matters while supporting broader commercial and contractual activities as required.

This opportunity is suited to a commercially minded lawyer who can work independently, manage competing priorities, and navigate complex legal and regulatory requirements within an international business environment.

Key Responsibilities

Data Protection, Privacy & AI Governance

• Support the day-to-day operation and development of the organization's data protection, privacy, and related AI governance programs.
• Research and advise on data protection, privacy, and relevant AI regulatory requirements across applicable jurisdictions.
• Translate legal and regulatory obligations into practical guidance for business stakeholders.
• Provide day-to-day privacy advice to functions including HR, IT, procurement, and other operational teams.
• Conduct or support legal and privacy reviews of new projects, systems, vendors, and technologies, including AI-enabled solutions.
• Assist with privacy, AI governance, legitimate interests, and other relevant assessments.
• Review and advise on data processing agreements, privacy clauses, international data transfers, and other contractual privacy requirements.
• Support the handling of data subject rights requests, including coordinating information gathering and reviewing relevant materials.
• Assist in the assessment and management of personal data incidents, including investigations, documentation, and notification considerations.
• Maintain and update privacy governance documentation, including policies, privacy notices, records of processing activities, assessment documents, guidance, and training materials.
• Monitor regulatory developments in data protection, privacy, and AI governance and assess their potential business implications.
• Collaborate with Legal, IT, Information Security, HR, and other stakeholders on privacy and governance matters, including regulatory inquiries where required.

General Compliance

• Support legal and regulatory compliance activities, including Know Your Customer (KYC), sanctions, anti-bribery and corruption, and counterparty due diligence.
• Assist with human rights and responsible supply chain compliance activities, including legal research, due diligence, and reporting.
• Prepare and review compliance-related policies, procedures, guidance, disclosures, and reports.
• Monitor relevant regulatory developments and support compliance reviews and due diligence exercises.
• Identify potential legal and compliance risks and provide practical guidance to business stakeholders.
• Escalate significant legal, regulatory, or compliance issues appropriately.

Commercial & General Legal Support

• Review, draft, and negotiate commercial contracts and agreements, including supply, services, purchasing, and framework agreements.
• Draft and advise on non-disclosure agreements and confidentiality arrangements.
• Support transactional and commercial due diligence activities, including document review and identification of key legal and contractual risks.
• Assist lead negotiators during contract negotiations by accurately implementing agreed positions into working drafts.
• Identify, assess, and elevate contractual risks and issues.
• Conduct legal research and support corporate, transactional, and other general legal matters.
• Provide practical legal advice to support commercial and operational decision-making.

Qualifications & Experience

Essential Qualifications

• common law-qualified lawyer with approximately 3–6+ years of post-qualification experience.
• Practical experience advising on data protection and privacy matters.
• Good understanding of core data protection principles and familiarity with the GDPR, including the ability to apply these principles to practical business situations.
• Experience advising on broader legal, regulatory, or compliance matters, gained in private practice, in-house, or a combination of both.
• Strong legal research and analytical skills, including the ability to assess requirements across multiple jurisdictions.
• Experience reviewing and drafting legal agreements and identifying contractual, regulatory, and compliance risks.
• Excellent written English and strong legal drafting capabilities.
• Ability to work independently, manage competing priorities, and exercise sound judgment.
• Commercially minded approach, with the ability to understand the practical implications of legal and compliance risks.

Preferred Qualifications

• Legal qualification in England and Wales, Australia, Hong Kong, or Singapore.
• Experience working in-house or with multinational organizations on cross-border legal matters.
• Relevant privacy, data protection, or AI governance qualifications or certifications, such as:
  • CIPP/E
  • CIPP/A
  • CIPM
  • AIGP
• Exposure to the shipping, maritime, energy, commodities, or trading industries.

Key Competencies

• Data Protection & Privacy
• GDPR & Regulatory Compliance
• AI Governance
• Legal Research & Analysis
• Contract Review & Negotiation
• Risk Assessment & Mitigation
• Cross-Border Legal Advisory
• Compliance Program Support
• Commercial Legal Advisory
• Stakeholder Management
• Written Legal Communication
• Independent Judgment & Decision-Making