23 Data Protection Specialist jobs in the Philippines

JOB SUMMARY:

Under the direct supervision of the Data Privacy Officer, performs activities of the IT Compliance Testing and Validation Department related to the implementation of the Bank's Compliance Program and adherence by IT and Information Security Units to regulatory requirements and/or standards in the performance of business or functions, as the case may be.

JOB DESCRIPTION

A. IT Compliance Program / Plan

Provides assistance to the Department Head (DH) in the:

1. preparation and updating of the Bank's IT Compliance Testing Plan;
2. identification of relevant banking laws, rules, regulations, policies and ethical standards on banking operations and identification and analysis of corresponding compliance risks; and
3. supervision of the coordination with various units concerned in the implementation of the IT Compliance Program, particularly the IT Compliance Testing Plan.

B. Communication & Training

As may be required, assists the DH in the preparation of training materials on the Bank's IT Compliance Program, Compliance Testing Methodology, among others and/or conducts lectures on the same.

C. Constructive Working Relationship with Regulatory Agencies

As may be required., assists the DH in coordinating with IT and Information Security Units with regards to documentary and other examination requirements during regular BSP and other regulatory examinations.

D. IT Compliance Testing, Monitoring & Assessment

1. Compliance Testing, Controls and Monitoring
2. Conduct independent compliance testing of IT and Information Security Units relating to banking laws, rules and regulations; maintains working papers/documentation of findings and prepares corresponding comment sheets
3. Coordinate with the Unit Management regarding findings/exceptions noted in order for the Unit to respond and/or take appropriate course of action;
4. Discuss with Unit Management significant issues as a result of the independent compliance testing, explain attendant compliance risks and secures actions to be taken including specific time table on noted exceptions/observations;
5. Prepares draft report for endorsement to and review of the DH and assists the DH in preparation of report of results to the Corporate Governance Committee;
6. Monitors the status of remedial plans taken on issues arising from Independent Testing and the preparation of updates to the Corporate Governance Committee for review of the DH;
7. Supervises/Assists the Compliance Analysts in the conduct of other compliance testing (head office or branch units), and participates in the discussion of the significant issues noted in the ICT; and
8. Supervises/Assists the preparation of ICT reports and reviews the reports prepared by other units' Compliance Analysts.

E. Reporting

Prepares summary reports and presentation materials for Corporate Governance Committee and other Bank committees as needed;

F. Administration

Assists the DH in the preparation of IT Compliance Testing and Validation Department Annual Business Plan, IT Annual Accomplishment Report and Annual Training Plan for approval of the Chief Compliance Officer;

G. Others

1. Promotes best practice and ethical standards.
2. Performs other tasks that may be assigned from time to time.

1. Serve as the main point of contact within the organization for staff members, regulators, and relevant public authorities on issues related to data protection

2. Ensure that company policies are in compliance with codes of practice such as NPC (National Privacy Commission)

3. Evaluate the existing data protection framework to identify areas of no or partial compliance, and rectify any issues

4. Devise training plans and provide data protection advice to staff members

5. Inform and advise the data controller or data processor on all matters related to data protection

6. Promote a culture of data protection and compliance across all units of the organization

RESPONSIBILITIES

1. Provide expert advice and educate employees on important data compliance requirements

2. Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders

3. Deliver training across all business units to staff members who are involved in data handling or processing

4. Conduct audits to ensure compliance and to address potential issues

5. Maintain records of all data processing activities of the company

6. Serve as point of contact for data protection authorities

Job Types: Full-time, Permanent

Benefits:

• Company events
• Health insurance
• Life insurance
• Opportunities for promotion
• Promotion to permanent employee

Work Location: In person

The Data Privacy Officer (DPO) will oversee the organization's compliance with data privacy laws and regulations, ensuring the protection of personal data across all company functions. This role serves as the primary point of contact for data privacy matters, ensuring the company adheres to the Data Privacy Act and other relevant regulations, while fostering a culture of privacy awareness throughout the organization.

Key Responsibilities:

• Ensure full compliance with data protection laws (e.g., Data Privacy Act, NPC regulations) and act as the liaison with the NPC.
• Develop and implement privacy documents, including manuals, notices, consent forms, and impact assessments.
• Create and enforce internal privacy policies and guidelines for consistent data handling across the organization.
• Collaborate with IT, HR, marketing, and operations to align data processes with privacy regulations and best practices.
• Conduct regular training, manage privacy risk assessments, lead data breach responses, and handle data subject requests.

Qualifications:

• Bachelor's Degree in Law, IT, Business Administration, or a related field (JD or legal background preferred but not required).
• At least 2–4 years of experience in data privacy, legal compliance, or IT security; preferably with exposure to e-commerce, retail, or FMCG sectors.
• Strong working knowledge of the Data Privacy Act of 2012, NPC Circulars, and global best practices (e.g., GDPR is a plus).
• Demonstrated ability to draft legal or policy documentation (e.g., manuals, notices, data-sharing agreements).
• Strong analytical, communication, and training skills.

Job Type: Full-time

Work Location: In person

We are looking for a highly responsible and knowledgeable Data Protection Officer to oversee our company's compliance with data protection laws and regulations. This role is essential in ensuring that we protect the personal data of our customers, employees, and partners, while maintaining transparency and trust.

Key Responsibilities

• Develop, implement, and monitor the organization's data protection policies and procedures.
• Ensure compliance with applicable data protection laws (e.g., GDPR, Data Privacy Act, and other relevant regulations).
• Act as the main point of contact for regulatory authorities and data subjects.
• Conduct regular data protection impact assessments, audits, and risk analyses.
• Provide advice and guidance to employees on proper data handling practices.
• Oversee data breach management, including investigation, reporting, and remediation.
• Maintain comprehensive records of processing activities.
• Stay updated on evolving data protection laws and recommend necessary adjustments.

Qualifications

• Bachelor's degree in Law, IT, Business, or related field.
• Proven experience as a Data Protection Officer, Compliance Officer, or Legal/Privacy Specialist.
• In-depth knowledge of data protection regulations (GDPR, Data Privacy Act, etc.).
• Strong understanding of IT systems, data security, and risk management practices.
• Excellent communication, advisory, and stakeholder management skills.
• High ethical standards, attention to detail, and problem-solving ability.
• Professional certifications (e.g., CIPP/E, CIPM, CDPSE) are an advantage.

What We Offer

• Opportunity to lead the data protection function in a growing and reputable organization.
• A collaborative and professional work culture.
• Competitive compensation and benefits package.

Job Types: Full-time, Permanent

Benefits:

• Additional leave
• Company Christmas gift
• Company events
• Health insurance
• Life insurance
• Opportunities for promotion
• Paid training

Work Location: In person

Key Qualifications

• Strong problem-solving skills with the ability to perform quick gap analyses, define priorities, and drive corrective actions.
• Solid knowledge of data protection, data ethics, and regulatory frameworks.
• Experience in data management and an affinity with information technologies.
• Proven track record in program management, preferably in an international setting.
• Excellent communication, facilitation, and collaboration skills to engage effectively with stakeholders at all levels.
• Ability to build meaningful relationships in a large, complex, and global enterprise.
• Strong results orientation, with a history of delivering solutions that exceed business expectations.
• Strategic mindset to align data initiatives with broader business, data management, and IT strategies.
• Excellent command of English, both written and spoken.
• Experience in policy formation and documentation.
• Transparent, flexible, and adaptable in fast-changing environments.
• Certified Information Privacy Manager (CIPM) certification is highly preferred.

Key Responsibilities

• Oversee the delivery of data governance and protection activities, identifying gaps and ensuring proper documentation to support adoption of policies and regulations.
• Partner with data owners, stewards, and consumers across business units and functions to ensure compliance and consistency.
• Provide guidance, frameworks, templates, and documentation for areas where a centralized approach adds value.
• Collect, develop, and share best practices across the Data Protection & Ethics (DPE) community.
• Identify opportunities to enhance data management practices and strengthen personal data protection processes.
• Collaborate across teams to ensure compliance, efficiency, and alignment with organizational goals.

• Strong knowledge of data protection laws and regulations, particularly the Philippine Data Privacy Act of 2012
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to work effectively with diverse stakeholders.
• Attention to detail and a high level of accuracy
• Ability to handle confidential and sensitive information with discretion.
• Knowledge in the following:
• Compliance and Regulatory Affairs
• Data Protection Policies and Procedures
• Privacy Impact Assessment (PIA)
• Data Subject Rights Management
• Data Security and Incident Management
• Training and Awareness
• Audits and Monitoring
• Documentation and Record-Keeping

Qualifications:

• Bachelor's degree in law, Business, Finance, Accounting or related field.
• At least 3-5 years of relevant experience in Compliance
• Sound knowledge on Compliance practices, standards and regulations such as Data Privacy Act of 2012
• Direct experience in managing interactions with regulators including Securities and Exchange Commission, and National Privacy Commission
• Good knowledge on Compliance practices, standards and regulations such as Data Privacy Act of 2012
• Direct experience in managing interactions with regulators including Securities and Exchange Commission, and National Privacy Commission.
• Good knowledge of business trends/ changes in legislation and regulation that impact Compliance practices.
• Good command of both spoken and written English.

Our client:

A leading Filipino beauty brand championing inclusivity, self-expression, and everyday confidence.

Fulltime: Onsite | Monday to Friday | 8am - 5pm

OVERVIEW

The Data Protection Officer is responsible for ensuring the company's compliance with the Data Privacy Act of 2012, NPC circulars, and other applicable data protection laws. The role involves developing policies, conducting training, monitoring compliance, and serving as the main contact for privacy-related concerns.

WHAT YOU'LL DO

• Ensure compliance with data protection laws, regulations, and internal policies.
• Develop, implement, and update privacy policies, guidelines, and procedures.
• Conduct data privacy impact assessments and regular compliance audits.
• Provide training and guidance to employees on data protection practices.
• Act as the primary point of contact for the National Privacy Commission (NPC) and other regulatory bodies.
• Monitor industry trends, global best practices, and recommend improvements.

WHAT YOU BRING

• Bachelor's degree in Law, Information Technology, Business Administration, or related course.
• 2–4 years of experience in data privacy, legal compliance, or IT security.
• Exposure to E-commerce, Retail, or FMCG sectors preferred.
• Strong working knowledge of the Data Privacy Act of 2012 and NPC Circulars (knowledge of GDPR is an advantage).
• Strong analytical, communication, and training skills.
• Ability to draft legal and policy documentation (manuals, notices, data sharing agreements).

WHAT SETS THE CLIENT APART

• A forward-thinking company that prioritizes data protection and compliance as part of its business integrity.
• Exposure to dynamic industries such as E-commerce, Retail, and FMCG, where innovation and speed drive growth.
• Supportive leadership and a culture that values collaboration, continuous learning, and professional development.

Job Type: Full-time

Benefits:

• Additional leave
• Employee discount
• Health insurance
• Life insurance
• Promotion to permanent employee

Work Location: In person

Department
Corporate Legal 1

Employee Type
Probationary

WHAT IS THE JOB LIKE?

• Ensure that the organizations being managed and handled collect, process, store, share, & discard/return the personal data of all data subjects in compliance with the applicable data privacy & protection laws and regulations .
• Serve as a the primary liaison officer of the organization and represent them before the the National Privacy Commission (NPC) and any other relevant government agencies.
• Implement a privacy by design approache in the organizations aligned with laws, regulations and their actual operations.
• Monitor and implement data privacy policies, controls and measures, document issues, file and register with the NPC and relevant government units, and coordinate/collaborate with other groups as necessary within the organization.
• Monitor and stay updated with current privacy trends, legislation and activities.
• Ensure proper data breach and security incident management by the organizations, PIC or PIP, including the latter's preparation and submission to the NPC of reports and other documentation concerning security incidents or data breaches within the prescribed periods.
• Inform and cultivate awareness on privacy and data protection within the organizations, including all relevant laws, rules and regulations and issuances of the NPC;
• Perform other duties and tasks that may be assigned by the organizations that will further the interest of data privacy, security within the company, and uphold the rights of the data subjects.

Experience Range Range (Years)
5 - 10 years

Job posted on

Duties & Responsibilities

• Responsible for overseeing the organization's data privacy
• Authorized on data protection matters, safeguarding the rights of data subjects, ensuring organizational accountability, and building a culture of privacy and security across all levels of the organization.
• Formulate, implement, and maintain privacy policies, procedures and governance frameworks

Job Specifications

• Bachelor's degree in Law, Information Technology, Business Administration, or related field. A Master's Degree of Certifications in Data Privacy is an advantage
• Must have at least 2-5 years of relevant work experience on data privacy, compliance, information security, legal, or risk management, or corporate governance
• Strong analytical, investigative, and problem-solving abilities
• Ability to develop and implement policies, frameworks, and training programs