Role Summary

The Compliance & Ethics Counsel Specialist for Data Privacy is responsible for conducting privacy reviews and supporting the implementation of the global data privacy program. This role requires regular communication and collaboration with internal stakeholders and external counsel. While the position involves considerable independent work, strong teamwork and communication skills are essential. Additionally, it contributes to process improvements, conducts privacy research, supports data subject rights and regulatory inquiries, and presents project updates to leadership and business teams.


Responsibilities

Draft, design, align, and improve compliance processes and templates to implement different data privacy laws and other requirements that come into effect


Coordinate with different stakeholders to understand and collect process requirements and advise on approaches


Act as a project manager for new initiatives and introduce measures for existing processes and ad-hoc initiatives


Conduct data privacy assessments, such as local country risk assessments, privacy reviews, and/or DP Impact Assessments, to ensure compliance with the data privacy program and regulations


Support ventures & acquisitions due diligence activities, and policy administration


Understand the contractual principles required to draft, review, and assist in negotiation data privacy schedules for contractual arrangements


Monitor legal developments, regulatory changes, and global trends related to data privacy, and analyze their impact on business operations and prepare internal guidance, communications, and training materials


Draft internal support documents


Identify and support subject access/individual rights request responses in alignment with internal policies and procedures


Understand relevant company policies and their application to the data privacy area, and company's business operations, regulatory environment, and potential data privacy risks in regulated areas


Develop training for team members, Legal, and other company functions on data privacy processes or regulatory requirements


Understand the different CORE (Compliance, Operations, Regulatory & Ethics) areas and the surrounding issues and statutory regulation. Build credibility and effective relationships internally within the Legal team


Support senior data privacy counsels in operational and advisory matters


Serve as tier 1 support to inquiries about data privacy and escalate issues appropriately


Educational Requirement

Must have:


Law Degree – required


Skills and Work Experience

Must Have:


Law degree with 3–4 years of experience in data privacy – required


Understanding of regulatory principles governing data privacy at a global level


Fluent in English with excellent written, oral, and presentation skills


Experience in conducting data privacy assessments, such as local country risk assessments, privacy reviews, and/or DP Impact Assessments


Understand the contractual principles required to draft, review, and assist in negotiation data privacy schedules for contractual arrangements


For just 1 on the CL9 roles: Experience in supporting ventures & acquisitions due diligence activities, and policy administration


Ability to understand and design process flows and metrics


Preferred but not a must: IAPP certifications, such as CIPP/E or similar are a plus


Effectively stakeholders' management skills, including experience with senior leadership


Skilled in legal research, including the use of GenAI tools


Proficiency in Microsoft SharePoint, Excel, PowerPoint, and Word; PowerBI proficiency is an advantage


Sound judgment in applying company policies, identifying risks, and escalating issues in a timely manner


Ability to adapt to changing priorities and work effectively in a fast-paced environment


Excellent time management, prioritization, and analytical skills


Additional Details

Open to applicants who are currently in the Philippines and already have the right to live and work in this country