job description
Join Unihealth-Parañaque Hospital and Medical Center as a Data Privacy Protection Officer and play a pivotal role in safeguarding sensitive information in compliance with global data protection regulations. This position is ideal for professionals passionate about cybersecurity, legal compliance, and ethical data management.
In this role, you will oversee the implementation of data privacy policies, conduct risk assessments, and ensure adherence to laws such as GDPR, HIPAA, and local data protection regulations. Your expertise will help mitigate risks, protect patient and organizational data, and foster a culture of privacy awareness.
Based in the vibrant and culturally rich region of Bali, Indonesia, this opportunity offers a unique blend of professional growth and an inspiring work environment. Whether you're in Canggu, Ubud, or Denpasar, you'll contribute to a mission-driven organization committed to excellence in healthcare and data integrity.
Responsibility
- Develop, implement, and maintain comprehensive data privacy policies and procedures in alignment with global and local regulations.
- Conduct regular data protection impact assessments (DPIAs) and audits to identify and mitigate risks.
- Monitor compliance with GDPR, HIPAA, and other relevant data privacy laws, ensuring organizational adherence.
- Serve as the primary point of contact for data subjects, regulatory bodies, and internal stakeholders on privacy-related matters.
- Provide training and awareness programs for employees on data privacy best practices and legal obligations.
- Investigate and resolve data breaches or privacy incidents, implementing corrective actions to prevent recurrence.
- Collaborate with IT and legal teams to ensure secure data handling, storage, and transmission across all systems.
- Stay updated on emerging privacy laws, technologies, and industry trends to proactively address new challenges.
Qualifications
- Bachelor’s degree in Law, Information Technology, Cybersecurity, or a related field. Advanced degrees or certifications (e.g., CIPP, CIPM, CISSP) are a plus.
- Minimum of 3-5 years of experience in data privacy, compliance, or a related role, preferably in healthcare or a regulated industry.
- In-depth knowledge of data protection laws (e.g., GDPR, HIPAA, Philippines’ Data Privacy Act) and industry standards.
- Proven ability to develop and implement privacy programs, including policies, procedures, and training materials.
- Strong analytical, problem-solving, and communication skills to effectively address complex privacy issues.
- Experience conducting risk assessments, audits, and incident investigations with a focus on data security.
- Familiarity with data encryption, access controls, and secure data management practices.
- Excellent English proficiency (written and verbal) with the ability to engage stakeholders at all levels.