Compliance & Data Privacy Officer

Location: Manila, Philippines

Company: VAS Global Services

VAS Global Services is looking for an experienced Compliance & Data Privacy Officer to join our team in Manila, Philippines.

This is a key role responsible for overseeing the company's regulatory compliance and data privacy functions in the Philippines, ensuring that our operations meet applicable legal, regulatory, licensing and contractual requirements while maintaining strong personal data protection standards.

The successful candidate will serve as the primary in-country point of contact for relevant regulatory authorities, including the National Privacy Commission (NPC), and will oversee the implementation and continuous improvement of the company's compliance and privacy programmes.

Key Responsibilities

Regulatory & Corporate Compliance

Ensure the company's registrations, licences, permits and statutory filings are maintained and renewed within the required timelines.
Monitor changes in Philippine laws and regulations and advise management on their operational and compliance implications.
Act as the primary point of contact for government agencies, regulators and relevant authorities.
Conduct compliance reviews and audits across Visa Application Centres (VACs), ensuring corrective actions are identified and implemented.
Maintain compliance risk registers and monitor contractual, client and diplomatic mission requirements.
Coordinate regulatory inspections, internal and external audits, and compliance investigations.
Deliver compliance awareness training to employees and management.

Data Privacy & Protection

Act as the company's registered Data Protection Officer (DPO) in the Philippines and maintain the required registration with the National Privacy Commission.
Develop, maintain and monitor the company's data privacy policies, procedures, privacy notices, consent processes and records of processing activities.
Conduct Privacy Impact Assessments (PIAs) for new business processes, systems and third-party vendors.
Ensure personal data belonging to applicants, employees and clients is handled securely and in accordance with the Philippine Data Privacy Act and applicable regulations.
Monitor data privacy practices across all centres through regular audits and compliance checks.
Manage data subject requests, privacy complaints and inquiries within statutory deadlines.
Lead the response to personal data breaches, including investigation, containment, notification and regulatory reporting.
Work closely with IT, Security, HR and Operations teams to ensure appropriate data access, retention, storage and disposal controls.
Deliver data protection awareness and training programmes across the organisation.

Requirements & Qualifications

Bachelor's degree in Law, Business Administration, Information Technology, Information Security or a related discipline.
Minimum 6 years of relevant professional experience in compliance, regulatory affairs, legal practice or data privacy, preferably within the Philippines.
Strong working knowledge of Philippine corporate and regulatory requirements, labour regulations and the Data Privacy Act of 2012, including its implementing rules and regulations.
Previous experience dealing directly with government regulators and authorities, particularly the National Privacy Commission.
Practical experience in regulatory compliance, licensing, compliance audits, risk management and statutory reporting.
Hands-on experience managing data breaches, privacy complaints, data subject requests and Privacy Impact Assessments.
Ability to develop and implement compliance and data privacy policies, procedures and training programmes.
Strong communication, stakeholder management, analytical and problem-solving skills.
Professional certifications in compliance, data protection or privacy management will be an advantage.