Information Security and Data Privacy Legal Controls Officer

Information Security and Data Privacy Legal Controls Officer at UnionBank of the Philippines

The Information Security and Data Privacy Legal Controls Officer shall be responsible for reviewing and approving contract terms relating to data privacy and information security and managing all contracts that the Office of the CISO and DPO is negotiating and entering to. The officer studies the legalities of contracts and help to negotiate terms and conditions with clients, third parties and other stakeholders.

Job Description

• Create, prepare, review and edit all contracts of the Office of the CISO and DPO, and ensure that the internal contract documents are accurate and well maintained;
• Maintain records for correspondence and documentation in relation to established of the Office of the CISO and DPO contracts and those in progress;
• Provide legal opinion to the different teams relating to information security and data privacy terms and conditions in the contract;
• Assist the ISDP Legal Controls Head in attending NPC hearings and collaborating with Litigation Unit in drafting position paper and other legal documents;
• Assist the ISDP Legal Controls Head with legal compliance on contracts and terms and conditions and agree on any changes, or amendments that may arise during its implementation or execution;
• Serve as primary point of contact on all information security and data privacy-related contract issues;
• Oversees the inventory management and organization of contracts and their related documents, keeps track of changes and status providing timely updates on these changes;
• Provides support to the ISDP Legal Controls Head by managing and docketing the contracts for review;
• Perform other duties that are required of and related to his/her functions.

Qualifications

• Bachelor of Laws or Juris Doctor is required. Lawyer (bar passer) is preferred
• Minimum of 2 years experience in contract review
• Experience working with contract regulations and the related laws is strongly preferred
• Knowledge of information security and privacy laws, banking regulations, industry standards and best practices.
• Demonstrate a solid understanding of legal terminology
• Excellent written and oral communication skills
• Able to manage confidential information with professionalism and strong attention to detail
• Possesses superior organizational skills and the ability to manage multiple projects with shifting deadlines
• Ability to work independently and successfully manage multiple concurrent projects simultaneously and by level of prioritization

Key skills/competency

• Contract Review
• Data Privacy Law
• Information Security Law
• Legal Compliance
• Regulatory Affairs
• Negotiation Skills
• Legal Opinion Drafting
• Documentation Management
• Risk Management
• Banking Regulations