Legal Privacy Technology Analyst

Our Clients; Taguig; On-site; PHP 1,000,000 - 1,400,000; Full time

Job summary

Our Clients is seeking a Legal Privacy Technology Analyst to help build privacy-by-design practices and compliance solutions across legal, IT, information security, and data governance teams. You will help embed data protection controls into enterprise systems, automate compliance activities, and support regulatory alignment, including SOX, PCI-DSS, HIPAA, and PII protections.

Role emphasizes collaboration, risk reduction, and practical privacy tooling, with responsibilities spanning access

Qualifications

• 4+ years in IT or technical compliance.
• Solid knowledge of SOX, PCI, HIPAA and PII protection.
• Understanding of access recertification and data protection practices.

Responsibilities

• Carry out scheduled user access reviews and remediation.
• Monitor application access rights and identity lifecycle.
• Support audits by testing samples and collecting evidence.
• Analyze data for regulatory reporting with operations teams.
• Write and maintain SOPs and control documentation.

Skills

Access governance

Audit readiness

Data protection

Regulatory compliance

Education

Professional privacy certifications (CIPP/US, CIPT, CIPM)

Tools

IAM systems

Job description

About the Role

We are looking for a Legal Privacy Technology Analyst to help build, run, and maintain privacy-by-design practices and compliance solutions. You will work closely with legal, IT, information security, and data governance teams to build data protection controls into enterprise systems and day-to-day operations. The role supports reducing data-related risk, automating compliance activities, and keeping the organization aligned with regulatory requirements.

What You'll Do

Access Governance and Audit Support

• Carry out scheduled user access reviews and follow through on remediation, in line with applicable regulations and data protection standards (including SOX, PCI-DSS, HIPAA, and requirements for PII, ePHI, and restricted data).
• Monitor and manage application-level access rights and user identity lifecycle activities.
• Support internal and external audits by performing sample-based request testing, working through case reviews, and gathering technical evidence of compliance. [Needs hiring manager validation: scope of "case studies" in the audit context]
• Work with management, technical support, and operations teams to pull, analyze, and validate data used in regulatory reporting.
• Write and maintain SOPs and control documentation so access review and tracking processes stay current and compliant.

Privacy Technology and Risk

• Collaborate with engineering, IT, and cybersecurity teams to build privacy principles into existing infrastructure and new systems.
• Manage and improve privacy tools, including data subject request (DSR) automation platforms, cookie consent mechanisms, and user preference management systems.
• Perform Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) on both established and new technology solutions.

What You'll Bring

Required

• At least 4 years of experience in IT or a related technical compliance field.
• Solid working knowledge of data privacy and security regulations, such as SOX, PCI, HIPAA, and general PII protection requirements.
• A good grasp of core security and compliance areas, including access recertification, audit readiness, application security, and data protection practices.

Preferred

• Hands-on experience working with or administering Identity and Access Management (IAM) systems.
• Privacy certifications such as CIPP/US, CIPT, or CIPM are a strong advantage.
• Skills and Strengths
• Analytical mindset: You can assess complex systems, spot compliance gaps, and work through security issues.
• Communication and collaboration: You communicate clearly in writing and in person, and can advise technical, legal, and business stakeholders.
• Independence: You manage your own deliverables, use sound judgment, and move work forward with minimal supervision.