Data Protection Officer

About the role

With a minimum of three years of relevant experience in data privacy, data protection, privacy compliance, or closely related legal or compliance work, you will own XieTech's day-to-day privacy program. You will help product, engineering, people, and operations handle personal data lawfully and carefully for Filipino users, applicants, and teammates, and you will advise leadership when a decision needs qualified counsel.

What you'll do

• Maintain the privacy program, including policies, notices, consent records, and the personal-data inventory
• Guide privacy reviews for new products, vendors, and internal processes before personal data is collected or shared
• Support data-subject requests and keep response records accurate and on time
• Prepare and coordinate breach assessment, notification, and follow-up with the right internal owners
• Review processor and vendor arrangements for privacy terms, access limits, and evidence of safeguards
• Train teams on practical privacy habits for websites, products, recruitment, and everyday operations
• Track privacy obligations, findings, and improvement actions through ownership and closure

What you'll bring

• Minimum of 3 years of relevant professional experience in data privacy, data protection, privacy compliance, or related legal or compliance work
• Working knowledge of the Philippine Data Privacy Act and how privacy programs operate in practice
• Ability to explain privacy requirements to product, engineering, and operations teammates without legal jargon
• Disciplined records for inventories, requests, incidents, vendors, and decisions
• Sound judgment about when a question needs qualified legal advice rather than an internal answer
• High discretion when handling personal, commercial, and incident information
• Reliable collaboration in a remote, flexible-time organization

Nice to have

• Experience as a data protection officer, privacy lead, or privacy program owner
• Familiarity with National Privacy Commission guidance, registration, or breach-notification practice
• Experience with technology products, cloud services, or software vendors that process personal data
• Relevant privacy certification or formal privacy training