Compliance and Data Protection Officer
# Compliance and Data Protection Officer **First Maharlika Collection Management Inc.** · Ortigas · `On-site` 🕒 **Статус:** *Опубликовано: 2 дня назад* · *Источник: Indeed* --- ### About the Role JOB OBJECTIVE The Compliance and Data Protection Officer (DPO) is responsible for establishing, implementing, and monitoring the Company's compliance framework to ensure adherence to applicable laws, regulations, regulatory requirements, insurance industry standards, internal policies, and corporate governance principles. The position oversees regulatory compliance monitoring, compliance risk assessment, policy development, regulatory submissions and coordination, and the identification and escalation of potential compliance breaches, with particular attention to requirements applicable to insurance agencies and related financial services. DUTIES AND RESPONSIBILITIES Regulatory Compliance and Corporate Governance - Develop, implement, and maintain the Company's compliance policies, procedures, standards, and monitoring framework. - Monitor applicable laws, circulars, regulations, and issuances affecting the Company, including requirements of the Insurance Commission, National Privacy Commission, and other relevant government authorities. - Assess the applicability of insurance laws, regulations, and regulatory obligations to the Company's insurance agency operations. - Maintain a regulatory compliance calendar covering applicable filings, submissions, renewals, reports, and other statutory or regulatory deadlines. - Review business processes, products, services, agreements, and proposed initiatives for potential compliance risks. - Advise Management on regulatory changes, compliance implications, and recommended actions. - Monitor compliance with internal policies, codes of conduct, contractual obligations, and corporate governance requirements. - Escalate material compliance concerns, suspected violations, and regulatory risks to the appropriate level of Management. Insurance Industry Compliance - Monitor applicable Insurance Commission regulations and requirements governing insurance agencies, insurance distribution, policy documentation, and related business activities. - Ensure that applicable licenses, registrations, accreditations, and regulatory requirements are monitored and renewed within prescribed timelines. - Review sales and marketing practices, customer disclosures, policy documentation, and related communications for compliance with applicable requirements. - Coordinate with relevant departments to verify that insurance transactions, client information, endorsements, renewals, and policy-related records comply with applicable rules. - Review agreements and arrangements with insurers, financing partners, service providers, and other business partners from a compliance perspective. - Monitor complaints, regulatory findings, and potential market-conduct concerns and recommend corrective or preventive measures. - Support the preparation of regulatory reports, responses, and supporting documents required by relevant authorities. - Coordinate with Management and external counsel on insurance-related regulatory inquiries, investigations, and compliance matters. Data Privacy and Protection - Serve as the Company's designated Data Protection Officer, subject to applicable legal and regulatory requirements and formal designation. - Develop and maintain the Company's data privacy policies, privacy notices, procedures, and internal guidelines. Monitor compliance with the Data Privacy Act of 2012, its implementing rules and regulations, and applicable National Privacy Commission issuances. - Oversee the maintenance of records of personal data processing activities, where required. - Review data collection forms, privacy notices, consent mechanisms, data-sharing arrangements, outsourcing agreements, and other relevant documents. - Coordinate privacy impact assessments and recommend appropriate organizational, physical, and technical safeguards. - Monitor access controls, confidentiality practices, retention periods, secure disposal, and authorized disclosure of personal data. - Coordinate the handling of data subject requests, privacy complaints, and concerns involving employee, customer, applicant, and business partner information. - Lead or coordinate the response to suspected personal data breaches, including assessment, documentation, escalation, notification, and remediation as applicable. - Conduct periodic reviews of privacy risks arising from HRIS, payroll, customer management systems, insurance policy records, and third-party integrations. Compliance Risk Assessment and Monitoring - Conduct periodic compliance risk assessments to identify regulatory exposures, control gaps, and potential violations. - Develop a risk-based compliance monitoring plan, including periodic reviews of high-risk processes and transactions. - Establish monitoring tools, compliance checklists, registers, and reporting mechanisms. - Validate reported compliance exceptions and coordinate investigation or corrective action with the appropriate department. - Track compliance findings and corrective action plans until resolution. - Identify recurring compliance issues and recommend process improvements to prevent recurrence. - Coordinate with Internal Audit and Quality Assurance while maintaining appropriate independence of responsibilities. - Prepare periodic compliance risk assessments and reports for Management. Policies, Contracts and Documentation Review - Review Company policies, procedures, memoranda, and internal guidelines for alignment with applicable laws and regulations. - Review contracts, undertakings, data-sharing agreements, confidentiality agreements, and other documents within the scope of the role. - Identify provisions that may expose the Company to legal, regulatory, data privacy, or contractual risks. - Recommend revisions to agreements and policies and coordinate with external legal counsel when specialized legal advice is required. - Maintain organized and controlled copies of compliance policies, regulatory correspondence, permits, licenses, and supporting documents. - Ensure that compliance-related records are retained and made available to authorized personnel when required. Training, Awareness and Advisory Support - Develop and deliver compliance and data privacy awareness programs for employees and relevant stakeholders. Conduct orientations on regulatory requirements, confidentiality, data protection, conflicts of interest, ethical conduct, and reporting of compliance concerns. - Provide practical guidance to departments on the implementation of compliance policies and controls. - Monitor training participation and maintain records of compliance-related learning activities. - Promote a culture of ethical conduct, accountability, transparency, and responsible handling of confidential information. Regulatory, Reporting and Management Updates - Prepare periodic reports on compliance status, regulatory changes, privacy risks, incidents, and corrective action progress. - Immediately escalate material regulatory concerns, significant privacy incidents, and potential violations through established reporting channels. - Maintain a tracker of regulatory obligations, deadlines, findings, and unresolved compliance issues. - Prepare documentation and coordinate responses for regulatory examinations, requests for information, and inquiries. - Recommend improvements to policies, controls, systems, and business processes based on compliance monitoring results. Board Governance and Corporate Secretariat Support - Facilitate the preparation, coordination, and conduct of Board meetings, including regular and special meetings, in coordination with the President and CEO, Corporate Governance Committee, and other concerned officers. - Coordinate the preparation and circulation of Board meeting notices, agendas, meeting materials, presentations, and supporting documents within the prescribed timelines. - Coordinate with the Corporate Governance Committee regarding governance initiatives, compliance matters, committee meetings, action items, and required reports. - Prepare, consolidate, or coordinate the preparation of Board meeting minutes, resolutions, attendance records, and other governance documentation, subject to review and approval by the appropriate authorized officers. - Maintain an organized repository of Board and committee records, resolutions, approved policies, meeting minutes, and governance-related documents, ensuring confidentiality and proper document control. - Monitor the status of Board resolutions, management directives, and committee action items and follow up with responsible departments on outstanding deliverables. - Prepare and consolidate Board and Corporate Governance Committee reports covering regulatory compliance, data privacy, material compliance risks, policy updates, incidents, corrective actions, and other matters requiring governance oversight. - Coordinate the timely submission of reports and presentation materials required by the Board and Corporate Governance Committee. - Ensure that governance documentation and meeting processes are consistent with applicable legal requirements, internal governance policies, and the Company's approved procedures. - Escalate material compliance concerns, unresolved governance issues, and significant regulatory risks to the President and CEO and, when appropriate, Legal Counsel. Legal Counsel Coordination and Legal Compliance Support - Coordinate directly with the Company's designated Legal Counsel on legal, regulatory, corporate governance, insurance compliance, and data privacy matters. - Refer contracts, policies, regulatory correspondence, Board resolutions, and other documents requiring legal interpretation or legal review to Legal Counsel. - Consolidate relevant facts, records, and supporting documents for legal opinions, regulatory inquiries, potential disputes, and compliance investigations. - Coordinate with Legal Counsel on updates to Company policies, governance procedures, regulatory requirements, and risk mitigation measures. - Facilitate the coordination of legal advice and recommendations with relevant departments and monitor the implementation of approved actions. - Coordinate with Legal Counsel on material regulatory incidents, data privacy breaches, compliance violations, and other matters requiring legal assessment. - Maintain appropriate records of legal and compliance matters, subject to applicable confidentiality, privilege, and document-retention requirements. - Provide Legal Counsel with periodic updates on material compliance risks, regulatory developments, governance concerns, and unresolved action items. Other Duties - Performs other work-related duties and responsibilities that may be assigned by the Chief Executive Officer and President from time to time in relation to the Employee's position, qualifications, expertise, and operational requirements of the Company. JOB SPECIFICATIONS - Bachelor's degree in Law, preferably with a Juris Doctor degree and admission to the Philippine Bar. - A bachelor's degree in Business Administration, Accountancy, Finance, or a related field may be considered for candidates with substantial relevant compliance and data privacy experience, subject to Management approval. - Preferably at least five (5) years of relevant experience in legal, regulatory compliance, corporate governance, data privacy, or risk management. - Relevant experience as a Compliance Officer, Data Protection Officer, Legal Officer, or Regulatory Affairs Officer. - Training or certification in data privacy, compliance management, risk management, or corporate governance. - Practical experience dealing with the Insurance Commission, National Privacy Commission, or other applicable regulatory authorities. - Experience in the insurance industry, insurance agency operations, financial services, or a regulated business environment is strongly preferred. - Demonstrated experience in regulatory monitoring, policy development, compliance assessments, documentation review, and coordination with regulatory authorities. - Experience in implementing or overseeing a data privacy program is preferred. - Working knowledge of applicable Philippine insurance laws and Insurance Commission regulations, including requirements applicable to insurance agencies. - Knowledge of the Data Privacy Act of 2012, its implementing rules and regulations, and applicable National Privacy Commission issuances. - Familiarity with corporate governance, regulatory reporting, compliance risk assessment, internal controls, and records management. - Ability to interpret legal and regulatory requirements and translate them into practical Company policies and procedures. - Strong analytical, investigation, documentation, report-writing, and stakeholder management skills. - High level of integrity, independence, confidentiality, sound judgment, and attention to detail. - Proficiency in Microsoft Office applications and compliance monitoring tools. Job Type: Full-time Work Location: In person
Наблюдалась 2026-10-18, впервые 2026-10-16, источник — Indeed.