Data Protection Officer

Thinking Machines is a technology consultancy building AI & data platforms to solve high impact problems for our client. Our vision is for the Philippines to become a global hub for data science. To do that, we create data cultures, one organization at a time.

We’re a company made up of intellectually curious, civic-minded, forever-learning individuals. We believe that great data science products are built with care for people, and that the best way to drive inclusive innovation is to start with a diverse team.

Our field of work is incredibly dynamic, so we want to work with people who are committed to growing with us. We want to hire people who can demonstrate an ability to learn, then provide them with personalized coaching, growth opportunities, and a great working environment to get them to world-class.

As a technology consultancy dealing with large amounts of data day-to-day, we recognize the importance of following data protection regulations set by local and international governing bodies. As the Data Protection Officer, it is your duty to analyze, monitor, and ensure all data processing activities of Thinking Machines are compliant to data privacy regulations such as the General Data Protection Regulation and the Data Privacy Act. This covers both our client projects and internal efforts, as well as our engagements with vendors and partners. You will be working closely with our Senior Leadership Team, as well as our Engineering team to fulfill this mandate.

From a process standpoint, this entails conducting control activities including, but not limited to, designing policies on data collection, access and processing, and conducting data access reviews, privacy impact assessments and Personally Identifying Information reviews, while ensuring these processes are both compliant and relevant to TM’s fast-paced, dynamic technology environment. From a legal standpoint, you will also be responsible for maintaining our legal compliance strategy and materials, such as securing local government permits with the SEC, and administering Data Sharing Agreements and Non-Disclosure Agreements.

You need to ensure our accreditation or certification, and renewal thereof, from relevant data privacy governing bodies to maintain proper regulatory standards. This includes becoming the officially appointed Data Protection Officer of Thinking Machines for the Philippines’ National Privacy Commission, and its equivalents.

In the event of security incidents, you will facilitate proper data breach and security incident management, and submit compliance documentation to the relevant governing bodies within the prescribed time frame.

Lastly, data security does not start and end with you; the whole organization has a crucial role in upholding our compliance standards. As such, you will be tasked to cultivate awareness within the company, advising employees on the data protection rules and regulations enforced by the relevant governing bodies, and write clear reports translating regulations into practical tactics.

As we continually expand the reach of Thinking Machines, this position is perfect for individuals interested in growing their legal expertise in international technology and data laws. We recognize that this is a new and growing field of practice. Would like to hire a driven, tenacious, dedicated learner who the company will invest in by providing training (both legal and technical) and opportunities to grow.

We are looking for someone who has the following traits:

• Knowledge of relevant privacy or data protection policies and practices

• Experience in data management, data governance design and implementation

• Excellent communication skills (written and verbal) to communicate concerns, issues, and solutions with both internal and external stakeholders

• Project management skills to drive data governance related initiatives

• Willingness and ability to learn the company’s technology stack, particularly cloud technologies

• 3-7 years of relevant previous experience 

Additionally, we are requiring candidates to have an internet connection speed of at least 12mbps and a viable work from home setup, as we are now operating as a fully remote company.

• Was previously a Data Privacy Officer for Philippine corporation  

• Has experience working with technology startups

• Has familiarity with Amazon Web Services, Google Cloud Platform, or Microsoft Azure

• Is comfortable with technology, and has written code and workflow automation tools

• Has a Juris Doctor degree or higher

We offer the following compensation and benefits:

• Competitive salary — the compensation amount is positively correlated with the difficulty of the job, relevant experience, fit, and skill factors.

• Fully remote — due to the global pandemic, we have shifted to a fully remote company for the foreseeable future while we monitor the situation.

• Individual professional development budget— an annual budget for conferences, training courses, books, and software is available to sharpen your skills and build new ones to help you grow in your role.

• Full health benefits — generous health insurance package