DATA PRIVACY COMPLIANCE OFFICER

Overview

The Data Privacy Compliance Officer plays a critical role in supporting the Information Security & Data Protection Officer in ensuring the bank's compliance with the Data Privacy Act (DPA), its Implementing Rules and Regulations (IRR), and other relevant guidelines set forth by the National Privacy Commission (NPC).

Functionally reporting to the EWB’s Data Protection Officer and administratively to EWRB – Risk Management Division. He/ She is responsible for supporting the development, implementation, and monitoring of data privacy policies and initiatives as well as fostering a strong culture of data protection, mitigating privacy risk, and promoting compliance within the organization in alignment with the bank’s standards and regulatory requirements

• Timely renewal of accreditations or certifications necessary for maintaining the required standards in personal data processing

• Facilitates and ensures conduct of Privacy Impact Assessments (PIA) for relevant organizational activities, measures, projects, programs, or systems.

• Ensures proper management of data breaches, and security incidents, including the preparation and timely submission of mandatory reports to the regulatory bodies

• Provides guidance, recommendations, and/ or independent opinions, as applicable, to partner business/ operating units on data privacy or security risks that may arise from proposed policies, business plans, initiatives, and/ or transactions.

• Oversight data sharing by assisting in advising the organization on the necessity of executing a Data Sharing Agreement (DSA) with third parties and ensuring compliance with legal requirements.

• Provides guidance to the organization in handling complaints and supporting the exercise of data subject rights, including requests for information, clarifications, rectifications, or deletion of personal data.

• Ensures that the Bank’s data privacy policies and strategies are in compliance with the applicable regulations, standards and strategic imperative of the organization.

• Coordinates with EWB counterparts regarding issues and concerns relating to data privacy raised during SLT and RMC meetings.

• Develops and/ or enhances materials for Data Privacy awareness activity in all levels of the Bank.

• Sends advisories related to Data Privacy to all operating units.

• Acts as the Subject Matter Expert (SME) for Data Privacy.

• Perform other functions and tasks that may be assigned by the immediate head.

• Bachelor’s Degree in a relevant field, such as cybersecurity, law, information technology, computer science, or related areas

• Certified Information Privacy Professional (CIPP) or Certified Information Security Professional (CISP) (Optional but Beneficial)

• With at least one (1) year of experience in data privacy, data protection, or related roles preferably in a banking industry or with similar environment

• Strong knowledge in data protection laws and regulations such as Data Privacy act of 2012 and General Data Protection Regulation (GDPR)

• Solid knowledge in banking data privacy obligations and risk management processes

• Basic understanding of Cybersecurity Principles

• Know-how and/ or familiar with Data Management and Analytics Platforms

• Ability to analyze situations, challenges, and problems with perceptiveness, and provide effective insights to address concerns

• Ability to demonstrate initiative and creativity

• Excellent oral and written communication skills

• Works with integrity

• Exhibits excellence at work

• Has sense of urgency and accountability

• Results-oriented

• Performance Driven

• Can work under pressure with minimal supervision

• Keen to details