Privacy Compliance Consultant

AIA Shared Services; Makati; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

MediCard Phils., Inc. is a leading health maintenance organization focused on protecting member data. The Data Privacy Compliance Consultant will safeguard our information assets, develop privacy frameworks, and guide our teams to comply with DP laws and regulations.

You will conduct Privacy Impact Assessments, monitor regulatory changes, and support DP-related activities across IT and business units, fostering a culture of data privacy and security.

Qualifications

• Experience in developing and implementing data privacy frameworks and policies.
• Ability to conduct Privacy Impact Assessments (PIAs) and map data flows to regulatory requirements.
• Strong understanding of DP laws and regulations and how they apply to IT and business units.

Responsibilities

• Governance: review and update DP policies and standards regularly.
• Reporting: maintain DP KRIs and coordinate regulatory communications.
• Expert advice: support IT and Security on DP controls and third-party contracts.
• Assurance: participate in DP risk assessments and compliance testing.
• Transformation: SME in driving DP initiatives within operations.
• Education and communication: develop and deliver DP training and advisories.

Skills

Data privacy

Regulatory compliance

Risk assessment

Training & awareness

Incident management

Contractual/data processing

Job description

MediCard Phils., Inc. is one of the country's leading HMO and the only HMO founded and run by Doctors. Since its inception, the concept of service-oriented total health care has been the molding ideal of MediCard. The competition is vast, and the benefits being offered by the competitors are tempting. However, MEDICard has taken the lead in providing innovative and productive ideas that cut down the cost of health maintenance without compromising its quality. MediCard now boasts of more than half a million members and over 54,000 accredited doctors in over 1,000 hospitals and clinics nationwide. It also operates 16 MediCard free-standing clinics that provide services at par with those offered by hospitals minus the confinement. MediCard is currently looking for assertive, dynamic and energetic individuals to fill up the following vacancy.

As a Data Privacy Compliance Consultant

Your primary objective will be to safeguard our organization's data and ensure compliance with Data Privacy laws and regulations. In this role, you will play a crucial role in protecting sensitive information and maintaining the privacy and confidentiality of our customers and stakeholders. You will be responsible for developing and implementing effective data privacy frameworks, policies, and procedures. You will also provide guidance and support in conducting Privacy Impact Assessments and ensuring that data handling practices align with applicable laws and regulations. Your expertise will be instrumental in building a culture of data privacy and security within our organization.

Governance

• Review and update of Privacy-related policies and standards on a regular basis and/or as needed.
• Conduct Gap Analysis of new and/or amended regulations, advisories, etc., related to data privacy.
• Identify priorities and emerging risks through environment, legal and regulatory, and business scans and align with DP initiatives.
• Identify opportunities to align both strategic and tactical initiatives of the organization to DP-related laws and regulations and Group-mandated policies to create more value to the organization.
• Coordinate all DP-related regulatory communications.
• Conduct annual review of the Privacy Impact Assessment.
• Help lead the annual Data Privacy Breach Drill.
• Help lead the DP-related incident management activities

Reporting

• Prompt reporting of high operational risk incidents associated with DP.
• Escalation of DP Breaches to the R&C Department for further assessment.
• Develop, review, and maintain DP-related KRIs.
• Coordinate communications mandated for DP Compliance.

Expert Advice

• Support IT and Information Security Departments on data protection standards implementation.
• Support management of contracts with third parties with focus on DP.
• Drive effective DP controls by supporting Business Units.
• Support organizational priorities by ensuring timely completion of requested DP-related activities within the defined Turnaround Time (TAT).
• Provide expert advice as a Subject Matter Expert (SME) to Business Units (BUs) and senior management members regarding any concerns related to D Assurance.

Assurance

• Support the development and help lead in conducting compliance testing to ensure adherence to DP laws and regulations.
• Drive the execution of regulatory and group-initiated DP risk assessments to identify, assess, and mitigate potential risks.
• Provide assistance in both internal and external regulatory audits related to DP, ensuring compliance with applicable laws and regulations, and best practices.

Transformation

• Provide expert support as a Subject Matter Expert (SME) in driving the operational transformation of DP initiatives.

Education and Communication

• Assist in the development of comprehensive training modules related to DP, ensuring that they are up-to-date and effective.
• Conduct trainings within the organization to educate employees on DP.
• Collaborate in the creation and dissemination of advisories that provide guidance on DP.
• Attend relevant trainings to stay updated on the latest developments and best practices in DP.

R&C Others

• Provide support in identifying and addressing operational, financial, and regulatory compliance risks associated with DP.