Head of Data Protection (DPO)

About the role

The Data Protection Officer (DPO) leads Metrobank’s compliance with the Data Privacy Act of 2012 and related regulations. Reporting to senior management, the DPO ensures that personal data is handled responsibly, safeguarding both the bank and its customers.

Key responsibilities

• Identify and document all personal data processing activities across the bank.
• Monitor and evaluate compliance of internal processes and third‑party service providers.
• Maintain required certifications and accreditations.
• Advise on Data Sharing Agreements and ensure their compliance.
• Oversee Privacy Impact Assessments (PIAs) and adopt a risk‑based approach.
• Provide guidance on data subject rights, complaints, and breach reporting to the National Privacy Commission.
• Promote awareness of data privacy laws and best practices within the organization.
• Develop and review privacy‑by‑design policies.
• Serve as the primary contact for the NPC, data subjects, and regulators.
• Coordinate with the NPC on all data privacy matters.

Required profile

• Licensed lawyer (Juris Doctor or equivalent).
• Experience reporting to regulators such as the NPC, BSP, or SEC.
• Preferably experience in the banking industry.

Required skills

What we offer

• Opportunity to lead data privacy strategy for a major Philippine bank.
• Professional growth within a supportive, community‑focused organization.
• Competitive compensation and benefits package.