Company: Union Bank of the Philippines
Position: Privacy Design Lead
Office Location: UnionBank Plaza - Ortigas, Pasig City
Job Summary: The Privacy Design Lead leads the Bank's privacy design and privacy engineering function by ensuring that privacy is embedded into products, services, systems, and processes by design and by default. It provides strategic direction on privacy methodologies, design standards, impact assessments, and cross-functional integration of privacy requirements across the development lifecycle. The role also serves as a key advisor on emerging privacy risks, regulatory developments, and privacy-enhancing technologies, while fostering a strong privacy-aware culture across the organization.
Essential Duties and Responsibilities:
Privacy Strategy and Governance
- Strategizes and oversees the Bank's Privacy-by-Design and Privacy-by-Default framework across product, service, system, and process development lifecycles to ensure privacy requirements are embedded in end-to-end business and operational processes from planning through implementation.
- Leads and serves as the primary advisor to stakeholders on emerging privacy risks, regulatory developments, and global best practices, providing guidance to support sound decision-making, regulatory alignment, and effective risk management.
- Leads the creation, implementation, and continuous improvement of privacy design methodologies tailored to the Bank's operational, technological, and strategic context, ensuring privacy controls are practical, scalable, and responsive to evolving business needs.
- Strategizes and directs the translation of regulatory requirements and international standards into actionable privacy design principles by developing privacy design patterns, reusable toolkits, and practical implementation approaches; integrating privacy into product and service development practices; and maintaining a comprehensive data inventory to support accountability and data governance.
Privacy Integration and Design Enablement
- Leads cross-functional collaboration among Privacy Designers, Product Owners, Solutions Architects, Security Architects, Technology teams, and other relevant stakeholders to embed privacy-preserving technologies and controls into system, product, and process designs.
- Supervises and directs privacy design and review activities to proactively identify, assess, and mitigate privacy risks during the early stages of development, ensuring that privacy issues are addressed before implementation and aligned with the Bank's risk and compliance requirements.
Assessment and Risk Oversight
- Oversees the timely conduct of Privacy Impact Assessments for new and existing initiatives, including projects, products, proofs of concept, system changes, and third-party agreements, and ensures privacy incidents are properly assessed and managed through the Security Incident Privacy Impact Assessment process led by Privacy Designers.
Capability Building and Culture
- Strategizes and champions the development and implementation of a privacy-aware culture across the organization by promoting accountability, awareness, and continuous learning, and by reinforcing privacy as a shared responsibility at all levels of the Bank.
Emerging Technology and Innovation
- Monitors, evaluates, and recommends the adoption of relevant industry developments and emerging practices in privacy engineering, user experience, artificial intelligence, fintech innovation, and privacy-enhancing technologies such as differential privacy, federated learning, and zero-knowledge proofs, ensuring the Bank remains forward-looking in its privacy capabilities.
Qualifications:
- Graduate of a bachelor's or master's degree.
- At least 4-6 years experience in privacy, data protection, or security roles, with at least 3 years in leadership and management capacity.
- Excellent oral and written English skills.
- With CIPM or CIPT certification is preferred.
- Experience in leading Privacy by Design initiatives in technology or financial industries.
Required Skills:
- Demonstrates the ability to embed privacy in product design and business processes.
- Strong familiarity with Philippines Data Privacy Act of 2012, NPC Circulars, and international frameworks like GDPR and CCPA.
- Skills in conducting privacy risk and impact assessments, and managing mitigation strategies.
- Systems thinking, solutions-oriented, risk modeling, project advisory skills, cross-functional collaboration
