JOB DESCRIPTION:

The Paralegal & Data Privacy Officer is responsible for providing high-level legal support, ensuring corporate governance, and managing the organization’s data privacy compliance framework. This role combines paralegal functions—such as contract review, legal research, and corporate document preparation—with the responsibilities of a Data Privacy Officer (DPO) under applicable privacy laws (such as the Data Privacy Act of 2012). Working closely with management and external legal counsel, the candidate will oversee data protection policies, conduct privacy impact assessments, handle legal documentation, and ensure regulatory compliance across all business operations.

JOB REQUIREMENTS/QUALIFICATIONS:

●With relevant education and/or certification, preferably Bachelor of Laws (LLB) graduate.

●Preferably with at least 1 year work experience as paralegal.

●Prior involvement in Data Privacy matters would be desirable.

●Computer savvy; research skills; analytical skills; leadership skills; interpersonal relationship skills; communication skills; a team-worker; has initiative; innate desire to learn; flexible and adaptable; strong work ethic.

EMPLOYMENT TYPE: initially under a 6-month service agreement; regularization based on acceptable performance

JOB RESPONSIBILITIES:

As Paralegal: The Paralegal provides crucial support to lawyers by focusing on legal tasks such as legal research, preparation of legal documents, case preparation and assisting with trial preparation.

1. Keep abreast of and conduct research on relevant laws, regulations and legal precedents in support of developing case strategies.

2. Assist in reviewing contracts and service agreements with client accounts.

3. Assist in drafting various legal documents such as pleadings and correspondences.

4. Assist with all aspects of case management, including fact investigation and evidence gathering, witness interviews, preparation for hearings and trials, organization of exhibits and management of deadlines.

5. Organize and maintain legal documents and evidences, in both paper and electronic filing systems.

As Data Privacy Officer: The Data Privacy Officer plays a key role in ensuring that the organization handles personal data responsibly and ethically, minimizing risks and maintaining the trust of its clientele.

1. Develop the company’s data privacy policies, ensuring alignment and compliance with relevant laws and regulations including RA 10173.

2. Ensure the development of function-specific data protection policies, procedures, and security measures.

3. Ensure that policies and procedures are effectively implemented across the organization.

4. Conduct regular audits and risk assessments to identify potential gaps in compliance with data privacy policies.

5. Educate and raise awareness of employees on data privacy principles, responsibilities, policies, and procedures.

6. Serve as primary point of contact for data protection authorities and regulatory agencies.

7. Respond to inquiries from data subjects regarding personal data.

8. Handle data breach incidents and security breaches in accordance with established procedures.

Data Privacy Management & Compliance: Develop, implement, and maintain the organization's data protection policies, ensuring full compliance with the Data Privacy Act and related regulatory guidelines.

Privacy Impact Assessments (PIAs): Conduct regular privacy impact assessments and risk audits for existing and new business processes, systems, and vendor partnerships.

Contract Review & Legal Support: Draft, review, and organize legal contracts, nondisclosure agreements (NDAs), corporate documents, and board resolutions under the direction of management or legal counsel.

Incidents & Breach Response: Oversee data breach management, response procedures, and incident reporting; liaise with relevant regulatory authorities (e.g., National Privacy Commission) and affected data subjects when required.

Regulatory Reporting & Corporate Filings: Maintain legal records, manage regulatory compliance filings, track permit renewals, and monitor changes in legislation affecting business operations.

Training & Policy Awareness: Conduct regular data privacy and legal compliance training programs for employees to foster an organizational culture of security, compliance, and privacy awareness.