Legal Privacy Technology Analyst | Taguig

About the Role
We are looking for a Legal Privacy Technology Analyst to help build, run, and maintain privacy-by-design practices and compliance solutions. You will work closely with legal, IT, information security, and data governance teams to build data protection controls into enterprise systems and day-to-day operations. The role supports reducing data-related risk, automating compliance activities, and keeping the organization aligned with regulatory requirements.

What You’ll Do
Access Governance and Audit Support

• Carry out scheduled user access reviews and follow through on remediation, in line with applicable regulations and data protection standards (including SOX, PCI-DSS, HIPAA, and requirements for PII, ePHI, and restricted data).
  
• Monitor and manage application-level access rights and user identity lifecycle activities.
  
• Support internal and external audits by performing sample-based request testing, working through case reviews, and gathering technical evidence of compliance. [Needs hiring manager validation: scope of “case studies” in the audit context]
  
• Work with management, technical support, and operations teams to pull, analyze, and validate data used in regulatory reporting.
  
• Write and maintain SOPs and control documentation so access review and tracking processes stay current and compliant.
  

Privacy Technology and Risk

• Collaborate with engineering, IT, and cybersecurity teams to build privacy principles into existing infrastructure and new systems.
  
• Manage and improve privacy tools, including data subject request (DSR) automation platforms, cookie consent mechanisms, and user preference management systems.
  
• Perform Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) on both established and new technology solutions.
  

What You’ll Bring
Required

• At least 4 years of experience in IT or a related technical compliance field.
  
• Solid working knowledge of data privacy and security regulations, such as SOX, PCI, HIPAA, and general PII protection requirements.
  
• A good grasp of core security and compliance areas, including access recertification, audit readiness, application security, and data protection practices.
  

Preferred

• Hands-on experience working with or administering Identity and Access Management (IAM) systems.
  
• Privacy certifications such as CIPP/US, CIPT, or CIPM are a strong advantage.
  
• Skills and Strengths
  
• Analytical mindset: You can assess complex systems, spot compliance gaps, and work through security issues.
  
• Communication and collaboration: You communicate clearly in writing and in person, and can advise technical, legal, and business stakeholders.
  
• Independence: You manage your own deliverables, use sound judgment, and move work forward with minimal supervision.