Legal Privacy Technology Analyst | Taguig

About the Role

We are looking for a Legal Privacy Technology Analyst to help build, run, and maintain privacy-by-design practices and compliance solutions. You will work closely with legal, IT, information security, and data governance teams to build data protection controls into enterprise systems and day-to-day operations. The role supports reducing data-related risk, automating compliance activities, and keeping the organization aligned with regulatory requirements.

What You’ll Do

Access Governance and Audit Support

• Carry out scheduled user access reviews and follow through on remediation, in line with applicable regulations and data protection standards (including SOX, PCI-DSS, HIPAA, and requirements for PII, ePHI, and restricted data).
• Monitor and manage application-level access rights and user identity lifecycle activities.
• Support internal and external audits by performing sample-based request testing, working through case reviews, and gathering technical evidence of compliance. [Needs hiring manager validation: scope of “case studies” in the audit context]
• Work with management, technical support, and operations teams to pull, analyze, and validate data used in regulatory reporting.
• Write and maintain SOPs and control documentation so access review and tracking processes stay current and compliant.

Privacy Technology and Risk

• Collaborate with engineering, IT, and cybersecurity teams to build privacy principles into existing infrastructure and new systems.
• Manage and improve privacy tools, including data subject request (DSR) automation platforms, cookie consent mechanisms, and user preference management systems.
• Perform Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) on both established and new technology solutions.

What You’ll Bring

Required

• At least 4 years of experience in IT or a related technical compliance field.
• Solid working knowledge of data privacy and security regulations, such as SOX, PCI, HIPAA, and general PII protection requirements.
• A good grasp of core security and compliance areas, including access recertification, audit readiness, application security, and data protection practices.

Preferred

• Hands-on experience working with or administering Identity and Access Management (IAM) systems.
• Privacy certifications such as CIPP/US, CIPT, or CIPM are a strong advantage.
• Skills and Strengths
• Analytical mindset: You can assess complex systems, spot compliance gaps, and work through security issues.
• Communication and collaboration: You communicate clearly in writing and in person, and can advise technical, legal, and business stakeholders.
• Independence: You manage your own deliverables, use sound judgment, and move work forward with minimal supervision.