IT Security and Compliance Officer  

• Will spearhead a risk assessment program for implementation
• Evaluate adherence to client identified requirements, policies and standards
• Monitor the Company’s compliance with applicable laws and policies;
• Ensure compliance and facilitate the registration of the company with the National Privacy Commission
• Act as the Data Privacy Officer for the company in compliance with the Data Privacy Act RA10173
• Inform and cultivate awareness on privacy and data protection within the Company;
• Advocate for the development, review and/or revision of policies, guidelines, projects and/or programs of the Company relating to privacy and data protection, by adopting privacy by design approach (PIA)
• Serve as the contact person of the Company, the National Privacy Commission (NPC) and other authorities in all matters concerning data privacy or security issues;
• Responsible for coordination with NPC regarding matters concerning data privacy and security
• Perform other duties and tasks that may be assigned by the Company that will further the interest of data privacy and security.
• Familiarity with General Data Protection Regulation (GDPR)

Functional Competencies

• Ensure compliance by conducting audits, risk assessments, business impact analysis, vulnerability assessment, gap analysis and the like
• Conduct periodic internal reviews or audits to ensure that compliance procedures are followed
• Work to build a culture of compliance and sensitivity to risks and will partner with appropriate groups in order to close out any identified risks and audit findings
• Liaise with the audit POC to provide documentation to support internal and external audits
• Ensure consistency of process documentation of other regulatory requirements
• Lead actions to maintain/adhere to local regulatory compliance (ISO 27001, PCI, SAS 70 )
• Provide input into stakeholder communication (i.e. dashboard reporting) includes identifying emerging risk, communicating concerns raised
• Ensuring adherence to internal controls
• Creation of Data Privacy Manual (if needed)

• Strong analytical and planning skills;
• Good communication and presentation skills;
• Excellent problem-solving skills;
• Candidate must possess a Bachelor's/College Degree
• 3 to 5 year(s) of work experience in the same capacity and position
• Excellent verbal, written and interpersonal communication skills
• Extensive experience in managing audits
• Critical thinking, responsiveness, perseverance, and resourcefulness in case of a breach
• Knowledge in Information Security Client Data Protection Business Continuity SOC1/SOC2 is a plus
• Familiarity with the applicable laws and policies in relation to the DPA and IT Security Protocols
• Knowledge of the office productivity tools such as MS Office and with above average skills in Google Sheets
• Preferably with ISO Certification