Regulatory and Cybercrime Case Management Executive

Smart Communications, Inc.; Makati; On-site; PHP 1,500,000 - 2,300,000; Full time

Job summary

Smart Communications, Inc. in the Philippines seeks a seasoned legal professional to lead incident response and regulatory compliance programs in cybersecurity and privacy.

You will oversee investigations, risk reporting, policy development, and vendor governance, translating complex regulations into practical controls across the business. You'll collaborate with cross-functional teams and regulators to ensure compliance, manage data protection, and provide security-focused legal guidance for

Qualifications

• More than 5 years of relevant experience in legal practice and advisory roles, specializing in privacy and data protection, cybersecurity, risk management, and technology law.
• Proven ability to deliver business-focused legal solutions with a strong commitment to problem-solving and operational integrity.
• Demonstrated expertise in managing complex regulatory requirements and ensuring compliance in heavily regulated and audited environments.
• Experienced in drafting, reviewing, and negotiating contracts, as well as implementing corporate rules for international data transfers and data residency.
• Strong background in collaborating with cross-functional teams and stakeholders to align legal strategies with organizational objectives, while maintaining institutional linkages and supporting governance initiatives.

Responsibilities

• Supports investigations of cybersecurity-related incidents and alleged cybercrimes, ensuring evidentiary integrity and proper documentation.
• Maintains and regularly updates the inventory of regulatory, commercial, and organizational technology compliance requirements.
• Collaborates with the Regulatory and Case Management Division Head to enforce cybersecurity laws and privacy regulations across the company.
• Prepares risk briefings, dashboards, and periodic reports (monthly and quarterly) with clear recommendations and decision-ready insights.
• Collaborates with the Division Head and cross-functional leaders to resolve complex legal issues and align legal strategies with business objectives.
• Provides expert advice on compliance with privacy frameworks and applicable statutes. Interprets emerging regulatory requirements and designs practical controls for data collection, processing, retention, sharing, international transfers, and data residency.
• Provides business-facing legal guidance on security controls, technology adoption, vendor engagements, contracts, and enterprise customer requirements, translating legal risk into actionable requirements for information security and operations.
• Reviews, negotiates, and enforces privacy and security clauses in supplier and enterprise customer contracts. Ensures that non-standard security requirements are properly documented, risk-assessed, and monitored for compliance throughout the contract lifecycle.
• Maintains the contract management database, ensuring accurate records of executed contracts and those under development.
• Contributes to drafting and harmonizing policies, standards, and procedures for privacy and cybersecurity governance.
• Supports the design, implementation, and adoption of controls across business units to ensure compliance and operational effectiveness.
• Provides targeted legal guidance, playbooks, and awareness materials for business and technical teams.
• Promotes consistent understanding of obligations and consequences of non-compliance.
• Prepare and consolidate reports from Regulatory and Case Management Supervisory/Staff for submission to the Division Head.
• Maintains a strong understanding of telecommunications and IT processes to tailor advice to technology-driven workflows.

Skills

Privacy & data protection

Cybersecurity law

Regulatory compliance

Risk management

Legal advisory

Education

Bachelor’s degree in Law

Graduation in Computer Science

Business Administration

Job description

Incident Response & Investigations (Cybercrime)

Supports investigations of cybersecurity-related incidents and alleged cybercrimes. Ensures evidentiary integrity, legal sufficiency, and proper documentation throughout the process. Coordinates internal and external stakeholders to achieve timely and effective resolution.

Regulatory Compliance

Maintains and regularly updates the inventory of all regulatory, commercial, and organizational technology compliance requirements. Assists in identifying compliance obligations, such as security, user access, privacy, and data integrity associated with applicable laws and regulations. Ensures alignment with evolving regulatory standards and supports audit readiness.

Case Management

Collaborates with the Regulatory and Case Management Division Head to enforce cybersecurity laws and privacy regulations across the company. Maintains procedures, repositories, and workflows for the intake, tracking, and closure of cases and matters. Ensures timely documentation and resolution in accordance with company policies and applicable regulations.

Legal Risk Identification & Reporting

Identifies, assesses, and escalates legal and regulatory risks associated with cybersecurity initiatives. Prepares risk briefings, dashboards, and periodic reports (monthly and quarterly) with clear recommendations and decision‑ready insights.

Regulatory Strategy & Stakeholder Coordination

Collaborates with the Division Head and cross‑functional leaders to resolve complex legal issues and align legal strategies with business objectives. Maintains strong working linkages with regulators, government agencies, and industry bodies to ensure compliance and support organizational goals.

Privacy & Data Protection (Domestic & International)

Provides expert advice on compliance with privacy frameworks and applicable statutes. Interprets emerging regulatory requirements and designs practical controls for data collection, processing, retention, sharing, international transfers, and data residency.

Cybersecurity Legal Advisory

Provides business‑facing legal guidance on security controls, technology adoption, vendor engagements, contracts, and enterprise customer requirements, Translates legal risk into actionable requirements for information security and operations.

Contracting & Third‑Party Governance

Reviews, negotiates, and enforces privacy and security clauses in supplier and enterprise customer contracts. Ensures that non‑standard security requirements are properly documented, risk‑assessed, and monitored for compliance throughout the contract lifecycle.

Security Contracts

Conducts initial reviews of contracts, statements of work (SOWs), and procurement documents (RFIs, RFQs, RFPs) to identify security‑related commercial requirements and applicable industry standards. Maintains the contract management database, ensuring accurate records of executed contracts and those under development.

Policy Development & Control Enablement

Contributes to drafting and harmonizing policies, standards, and procedures for privacy and cybersecurity governance. Supports the design, implementation, and adoption of controls across business units to ensure compliance and operational effectiveness.

Training, Awareness & Advisory

Provides targeted legal guidance, playbooks, and awareness materials for business and technical teams. Promotes consistent understanding of obligations and consequences of non‑compliance.

Governance Support

Prepare and consolidate reports from Regulatory and Case Management Supervisory/Staff for submission to the Regulatory and Case Management Division Head.

Telecommunications & Technology Industry Insight

Maintains a strong understanding of telecommunications and IT business processes, architectures, and operational practices. Tailors legal advice to technology‑driven workflows, service delivery models, and customer or partner ecosystems.

HR Labor Relations

Prepares and consolidates reports from Regulatory and Case Management supervisory staff for submission to the Regulatory and Case Management Division or Cyber Security Governance Head.

People Management

Provides timely, constructive feedback on staff and supervisor performance. Acts as a mentor and role model, fostering growth and development. Ensures the creation and execution of effective succession plans to build future leadership.

Operational Support

Provide leadership and support for additional duties and responsibilities as assigned, ensuring alignment with organizational priorities and operational excellence.

EDUCATION

Bachelor’s degree in Law, Computer Science, or Business Administration; a graduate degree in any of these fields is preferred.

WORK EXPERIENCE

More than 5 years of relevant experience in legal practice and advisory roles, specializing in privacy and data protection, cybersecurity, risk management, and technology law. Proven ability to deliver business‑focused legal solutions with a strong commitment to problem‑solving and operational integrity. Demonstrated expertise in managing complex regulatory requirements and ensuring compliance in heavily regulated and audited environments. Experienced in drafting, reviewing, and negotiating contracts, as well as implementing corporate rules for international data transfers and data residency. Strong background in collaborating with cross‑functional teams and stakeholders to align legal strategies with organizational objectives, while maintaining institutional linkages and supporting governance initiatives.