Information Security & Privacy Specialist

We’re looking for an Information Security & Privacy Specialist with 1–3 years of experience to support our compliance and audit efforts. This role is primarily focused on administrative and documentation tasks but also requires hands-on involvement in compliance audits and regulatory monitoring. You will help ensure that our company remains compliant with the Data Privacy Act of 2012 and other applicable information security standards.
Key Responsibilities

• Maintain and regularly update information security and privacy documentation (e.g., policies, procedures, process flows).


• Plan and conduct internal compliance audits related to data privacy and information security.


• Prepare and consolidate audit findings, reports, and recommendations.


• Review and improve documentation to ensure compliance with the Data Privacy Act of the Philippines and other relevant regulations.


• Track compliance activities across departments and maintain organized records.


• Monitor changes to relevant privacy and information security laws and recommend necessary adjustments.


• Coordinate with internal teams to address audit findings and follow through on corrective actions.


• Support awareness campaigns and staff training on privacy and information security best practices.


• May serve as the designated Compliance Officer for Privacy with the National Privacy Commission (NPC).

Qualifications

• Bachelor’s degree in Information Technology, Legal Management, Business Administration, or a related field.


• 1–3 years of experience in compliance, internal audit, risk, or information security.


• Working knowledge of the Data Privacy Act of 2012 and its IRR.


• Experience conducting audits, preparing reports, and reviewing compliance documentation.


• Excellent attention to detail, organizational, and documentation skills.


• Strong written and verbal communication abilities.


• Ability to work independently and coordinate with multiple stakeholders.

Preferred

• Familiarity with standards or frameworks such as ISO 27001, NIST, or GDPR.


• Experience preparing for or supporting external audits or regulatory reviews.


• Data privacy or audit certifications (e.g., CDPSE, CISA, DPO certification, etc.) are an advantage.