RCI: Data Privacy Officer

Bachelor's degree in Law, Information Technology, Computer Science, Business Administration, Human Resources, or a related field.

At least 3–5 years of relevant experience in data privacy, data protection, compliance, information security, risk management, legal, or governance functions.

Strong working knowledge of the National Privacy Commission regulations, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and related issuances.

Experience in developing, implementing, and monitoring data privacy and data protection programs, policies, and procedures.

Knowledge of privacy impact assessments (PIAs), data mapping, data breach management, and data subject rights management.

Familiarity with information security principles, cybersecurity practices, records management, and risk assessment methodologies.

Experience coordinating with internal stakeholders, regulators, auditors, and third-party service providers on privacy and compliance matters.

Strong analytical, problem-solving, project management, and documentation skills.

Excellent communication and stakeholder management skills, with the ability to conduct privacy awareness and training programs across all levels of the organization.