Risewave Consulting, Inc.
Key Responsibilities • Compliance Oversight: Monitor the organization's compliance with the DPA, its IRR, and all relevant NPC circulars. • Privacy Impact Assessments (PIA): Lead PIAs for new bank products, BPO workflows, and third-party vendor integrations to identify and mitigate privacy risks. • Incident Management: Serve as the primary lead for the Data Breach Response Team, ensuring timely notification to the NPC and affected data subjects. • Policy Development: Draft and update Privacy Manuals, Consent Forms, and Data Sharing Agreements (DSAs) tailored to cross-border BPO transfers or banking secrecy laws. • Training & Awareness: Conduct regular privacy sessions for employees, specifically focusing on "Privacy by Design" in customer service and financial processing. • Regulatory Liaison: Act as the main point of contact for the National Privacy Commission and handle Data Subject Requests (DSRs). Qualifications • Experience: 3–5 years of dedicated experience in Data Privacy, Compliance, or Information Security. • Industry Expertise: Proven track record in the Banking/FinTech or BPO/ITBPM sectors is mandatory. • Banking: Familiarity with BSP (Bangko Sentral ng Pilipinas) regulations on data governance and consumer protection. • BPO: Experience managing cross-border data flows and client-specific privacy Master Service Agreements (MSAs). • Education: Bachelor’s degree in Law, Information Technology, Business Administration, or a related field. • Certifications (Preferred): \ NPC DPO ACE Level 1 or 2. • IAPP Certifications (CIPP/E, CIPM, or CIPT). • Technical Skills: Strong understanding of IT infrastructure, encryption standards, and data lifecycle management.
Risewave Consulting, Inc.
