Logo of Huzzle

Security and Data Privacy Lead

image

Amadeus

2mo ago

  • Job
    Full-time
    Senior Level
  • Legal
    IT & Cybersecurity
  • Manila
  • Quick Apply

AI generated summary

  • You need a relevant degree, privacy/security certifications, 5+ years in data privacy/security, knowledge of data protection laws, and familiarity with ISO 27001 and NIST. Strong skills in analysis and communication are essential.
  • You will manage data privacy risks, deliver training, ensure compliance with regulations, conduct impact assessments, respond to breaches, and liaise with stakeholders and regulatory authorities.

Requirements

  • Bachelor’s degree in Law, Cybersecurity, Information Technology, or a related field.
  • Privacy and Security certifications strongly preferred. e.g. Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), CISM or equivalent
  • At least 5 years combined experience in security, data privacy, data protection, or a related field in an IT company or Software Development company.
  • In-depth knowledge of the Data Privacy Act of 2012 and other relevant data protection laws
  • Experience with data privacy and protection policy and procedures in a software development environment.
  • Demonstrated understanding of information systems, data processing, data security and/or data protection needs.
  • Familiarity with industry standard security frameworks such as ISO 27001, CSA STAR, and NIST.
  • Familiarity with software development and travel industries a plus.
  • Strong analytical, organizational, and communication skills.
  • Ability to prioritize tasks based on risk.
  • Ability to handle sensitive information with discretion and integrity.
  • Amenable to work in BGC Taguig, on a Hybrid work setup

Responsibilities

  • Work with stakeholders to reduce security and privacy related risk across the company.
  • Promote a culture of data privacy awareness within the organization.
  • Develop and deliver training programs to educate staff on data privacy and protection.
  • Be familiar with and consult on data privacy regulations, policies, and procedures.
  • Promote compliance with security and data privacy policies and regulations.
  • Monitor and document compliance with security and data privacy policies and regulations.
  • Participate in the corporate data privacy program representing the Manila offices.
  • Conduct DPIAs for new projects, systems, and processes involving personal data.
  • Identify gaps and recommend appropriate plans to mitigate potential privacy risks.
  • Participate in and support the response to data breaches and other privacy and security incidents.
  • Coordinate with corporate privacy office on reporting breaches to the NPC and affected individuals as required by applicable law.
  • Coordinate security concerns between local and corporate teams.
  • Support and Lead security initiative with staff in the local offices.
  • Act as point of contact between the local company and data subjects, as well as regulatory authorities.
  • Address inquiries and complaints regarding data privacy issues.
  • Prepare and submit regular reports on data privacy compliance to internal stakeholders and regulatory authorities as required.

FAQs

What is the job title for this position?

The job title is Security and Data Privacy Lead.

Where is this position located?

This position is based in the Manila office of Navitaire.

What are the main responsibilities of the Security and Data Privacy Lead?

The main responsibilities include championing security and data privacy, ensuring compliance with regulations, conducting Data Privacy Impact Assessments (DPIAs), managing incidents, facilitating communication, and preparing documentation and reports.

What qualifications are required for this role?

A Bachelor's degree in Law, Cybersecurity, Information Technology, or a related field is required, along with relevant privacy and security certifications and at least 5 years of experience in security, data privacy, or related fields.

Is experience in the travel industry preferred for this position?

Yes, familiarity with the software development and travel industries is considered a plus for this position.

What skills are important for the ideal candidate?

Strong analytical, organizational, and communication skills, the ability to prioritize tasks based on risk, and the capability to handle sensitive information with discretion and integrity are important for the ideal candidate.

What certifications are preferred for this role?

Certifications such as Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), and CISM or equivalent are strongly preferred.

Will the Security and Data Privacy Lead act as a Data Privacy Officer?

Yes, this position will act as the designated Data Privacy Officer overseeing compliance with data privacy laws and regulations.

What kind of training programs will the Security and Data Privacy Lead develop?

The Security and Data Privacy Lead will develop and deliver training programs to educate staff on data privacy and protection.

What kind of work setup is offered for this role?

The role offers a hybrid work setup, with work amenable in BGC Taguig.

How can candidates apply for this position?

Candidates can create their candidate profile manually or upload their CV/Resume to apply for this position.

Does Amadeus have policies for diversity and inclusion?

Yes, Amadeus aspires to be a leader in Diversity, Equity, and Inclusion in the tech industry, fostering a culture of belonging and fair treatment for all employees.

Is Amadeus an equal opportunity employer?

Yes, Amadeus is an equal opportunity employer and considers all qualified applicants without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability, or any other characteristics protected by law.

Technology
Industry
10,001+
Employees
1987
Founded Year

Mission & Purpose

Amadeus is a leading provider of advanced technology solutions for the global travel industry. Their innovative solutions empower travel agencies, airlines, hotels, and other travel service providers to streamline their operations, enhance customer experiences, and drive business growth. Amadeus offers a wide range of products and services, including reservation systems, airline IT solutions, travel agency platforms, hotel distribution systems, and travel data analytics. Their ultimate mission is to shape the future of travel by delivering cutting-edge technology solutions that enable seamless and personalised travel experiences. With a deep understanding of the industry and a commitment to innovation, Amadeus strives to transform the way people plan, book, and experience travel, while helping businesses thrive in the dynamic and competitive travel landscape.

Culture & Values

  • Customer first

    We listen carefully and work as partners. We keep our promises. We’re committed to our customers’ success.

  • Working together

    We respect and embrace diversity of all people and cultures. We collaborate across teams. We communicate clearly and act decisively.

  • Taking responsibility

    We’re accountable for our own work. We act as owners and use company resources carefully. We keep developing our skills.

  • Aiming for excellence

    We strive for outstanding results in a competitive market. We learn from our mistakes. We innovate and welcome change.

Benefits

  • Annual bonus

    Rewarding your work.

  • Equity plans

    To share in what you build.

  • Wellbeing programs

    Keeping you healthy.

  • Learning environment

    Always be excited to work at Amadeus.

  • Flexible workplace

    Because life comes first.