Data Privacy and Compliance Manager will handle the implementation of Knauf Data Privacy Policy and Process. S/he will be the primary contact person for data protection-related questions and preliminary checks and related research, recommendations, and risk assessments. S/he ensures that the company complies with Data Privacy Act of the Philippines and its outside regulatory and legal requirements as well as policies and by laws.

He/She will also be responsible for ensuring that all corporate processes and procedures comply with laws, rules and regulations. He/she proactively monitors and drives compliance management and makes sure the organization stays abreast of regulatory standards and fulfills the role of an in-house expert, keeping an eye on all developments.

Data Privacy and Protection

• Implementation of the Knauf Data Privacy Policy and Knauf Data Privacy Processes.
• Design and manage internal local data protection organization in coordination with the respective departments and regional counterparts.
• Obtain relevant information on behalf of the Group Data Privacy Officer and/or the Group Data Privacy Coordinators within the Business Unit
• Contact person for data protection-related questions and preliminary checks and related research, recommendations, and risk assessments.
• Responsible for the documentation, implementation, management, and control of standard processes and policies
• Development, documentation, and continuation of process descriptions as well as the register of processing activities (ROPA)
• Maintaining the level of data protection, for example by designing and conducting employee sensitization/training or organizing employee sensitization/training for the respective departments and assigning the responsible Divisional/Regional Privacy Coordinator and/or the Group Privacy Officer
• Foster data privacy culture in the organization and cultivates awareness on privacy and data protection.

Compliance

• Acts as a resource person on regulatory items to support the company’s business continuity.
• Develops programs covering identification, monitoring and remediation to create a compliant business operation.
• Monitors regulatory compliance of the company and manages information flow, serving as a link between specialist departments and management and APAC.
• Conducts compliance risks assessments, testing and recommend measures for improvements.
• Trains and educates employees so that they are informed of relevant compliance updates.
• Act as head of employee disciplinary committee for any violation related to code of conduct.

Reporting/Coordination

• Coordinating the processing of data protection incidents, data subject enquiries (requests for information, deletion, objection) and other standard processes (advertising objection, commissioned data processing, obligation to data secrecy)
• Management and documentation of data protection incidents
• Regular coordination with the responsible Divisional /Regional Privacy Coordinator
• Communicate updates or announcements from the Group/APAC
• Regular reporting to local and regional stakeholders.

Job Requirements:

• Candidate must be graduate of Bachelor's degree major in Legal/Law studies.
• Certification in Data Protection is preferred
• At least 5 years of relevant work experience in Data Privacy and Legal Compliance
• Analytical, detail-oriented and agile to the changing demands of the job