data protection OfficerPhilippine Digital Asset Exchange

Objectives of this Role
- Act as the primary point of contact within the organization for members of staff, regulators, and any relevant public bodies on issues related to data protection
- Ensure the company's policy is in accordance with the Data Protection Act (DPA) of 2012, its Implementing Rules and Regulations (IRR), issuances by the National Privacy Commission (NPC) and other applicable laws and policies.
- Evaluate the existing data protection framework and identify areas of non or partial compliance and rectify any issues
- Devise training plans and provide data protection advice and support for members of staff
- Promote a culture of data protection compliance across all units of the organization
Daily and Monthly Responsibilities
- Provide expert advice and educate employees on important data compliance requirements
- Draft new and amend existing internal data protection policies, guidelines, and procedures, in consultation with key stakeholders
- Hold training with staff members across different business units who are involved in data handling or processing
- Proactively conduct audits to ensure compliance and address potential issues
- Collect information to identify the company's processing operations, activities, measures, projects, programs, or systems and maintain a record thereof
- Analyze and check the compliance of processing activities, including the issuance of security clearances to and compliance by third-party service providers
- Ensure the conduct of Privacy Impact Assessments (PIA) relative to activities, measures, projects, programs or systems of the company
- Advise the company regarding complaints and/or the exercise by clients of their rights (e.g., requests for information, clarifications, rectification or deletion of personal data)
- Ensure proper data breach and security incident management by the company including the preparation and submission to the NPC of reports and other documentation concerning security incidents or data breaches within the prescribed period
- Serve as the point of contact between the company and the National Privacy Commission
Skills and Qualifications
- Minimum of two years experience working in data protection compliance or a related field
- Expertise in data protection laws and practices including an in-depth understanding of the DPA
- Experience within a legal, audit and/or risk function department
- Strong project management skills
- Ability to work well under pressure and manage sensitive and confidential information
- Excellent verbal and written communication skills, with strong attention to detail
- Great interpersonal skills and ability to work well both independently and as part of a team
Preferred Qualification
- Active DPO certification