Corporate Legal Counsel & Data Privacy Officer at SuperStaff · Makati

The Corporate Legal Counsel & Data Privacy Officer manages the company’s legal affairs, ensures compliance with applicable laws and regulations, and protects the organization from legal and regulatory risk. The role provides legal advice, handles corporate and labor matters, manages contracts, represents the company in legal proceedings, and concurrently leads data protection, privacy governance, and regulatory compliance programs, including ISO, HIPAA, and other certifications.

Key Responsibilities

1. Corporate Legal and Compliance

• Provide legal advice to management on corporate, commercial, regulatory, labor, and compliance matters.
• Draft, review, and negotiate contracts and other legal documents with clients, vendors, partners, and other stakeholders.
• Ensure company transactions and operations comply with laws, regulations, and internal policies, identifying and mitigating legal risks.
• Conduct legal due diligence on investments, transactions, and strategic initiatives.
• Represent the company before courts, tribunals, and government agencies; coordinate with external counsel as needed.
• Prepare legal briefs, pleadings, position papers, and other case documentation.
• Handle labor-related matters, including disputes, disciplinary cases, consultations, and compliance with employment laws.
• Perform corporate housekeeping, including documentation and regulatory filings for the company and its subsidiaries/affiliates.
• Monitor legal and regulatory developments and brief management on business impact.
• Develop, review, and recommend company policies on legal, compliance, and governance issues.

2. Data Privacy Officer (DPO)

• Act as the designated Data Privacy Officer under applicable data protection and privacy laws (e.g., DPA and relevant international frameworks).
• Develop, implement, and maintain the company’s data privacy and protection program (policies, procedures, and guidelines).
• Monitor and ensure compliance with data privacy laws, contractual obligations, and internal privacy standards.
• Conduct privacy impact and risk assessments and audits on personal data processing.
• Oversee responses to data privacy incidents, including investigation, mitigation, documentation, required notifications, and corrective actions.
• Lead privacy awareness, training, and communications for employees and key stakeholders.
• Serve as primary contact for regulators, data subjects, and external partners on privacy matters.

3. Functional Compliance and Certifications

• Work with Operations, IT, Security, HR, Finance, and other teams to ensure compliance with ISO, HIPAA, and other relevant standards and certifications.

• Provide legal and compliance input on policies, procedures, and controls required for certifications.

• Support internal and external audits related to legal, privacy, security, and certification requirements, including evidence and documentation. Participate in risk assessments and management reviews for certification programs, advising on legal and regulatory implications.

• Review and align client contracts, business associate agreements, and data processing agreements with certification obligations.

• Recommend enhancements to the company’s governance, risk, and compliance framework.​

• Education: Bachelor’s Degree in Law.

• Licensure: Licensed lawyer in the Philippines (Philippine Bar).

• Work Experience:

  1. At least 5 years of experience in corporate and/or labor law, preferably in-house.
  2. Experience in corporate governance, regulatory and other compliance programs, data privacy, or information governance.
  3. Experience with ISO, HIPAA, or similar security/privacy-related standards, certifications, and audits.
  4. Background in labor relations and litigation, preferably in BPO or services environments.
  5. Prior experience as Data Privacy Officer, Data Protection Officer, or equivalent.
  6. Experience in a BPO, shared services, or technology-driven environment.

• Competencies / Skills / Abilities:

  1. Strong understanding of data privacy and security principles; familiarity with the Philippine Data Privacy Act and, ideally, international frameworks (e.g., GDPR, HIPAA).
  2. Strong analytical and problem-solving skills, with the ability to balance legal risk and business goals.
  3. Excellent verbal and written communication, able to explain complex legal concepts in practical terms.
  4. Strong negotiation and stakeholder management skills, including interaction with senior management and external parties.
  5. High attention to detail, integrity, and professionalism.
  6. Ability to work collaboratively across cross-functional teams in a fast-paced environment.​

• Relationship Management:

  1. Reports to: People and Culture Director (administrative line).
  2. Internal: Works with various levels and functions across the company.
  3. External: Coordinates with external legal counsel and the designated Corporate

• HMO with 1 free dependent

• Life Insurance

• 20 PTO leave credits

• Company owned equipment

• Full time, Hybrid Setup

• Day Shift