Privacy, compliance and information-security risk in practice.

October 2024 – Present

Remote

RAM Privacy & Security

Principal Consultant

Independent Consulting Practice

• Assess cybersecurity, privacy, and technology-risk issues for regulated and high-risk organizations and translate findings into governance, control, and remediation work.
• Conduct risk assessments and translate findings into prioritized remediation actions, implementation roadmaps, and measurable controls.
• Develop policies, standards, procedures, incident-readiness materials, and executive reports; support third-party risk, audit readiness, regulatory compliance, and stakeholder coordination.
• Selected consulting work: Government (policy, digital transformation, BC/DR); manufacturing (AI governance, ICS cybersecurity); insurance (digital transformation); financial institutions (privacy operations); business process outsourcing (HR privacy); retail (compliance); energy (ICS cybersecurity); and hospitals and clinics (patient privacy).

October 2024 – January 2026

Philippines

National Privacy Commission

Innovation and Transformation Consultant

Designation: Chief Information Technology Officer

• Assessed cybersecurity, technology-risk, and information-security issues and advised on control implementation and critical-infrastructure protection.
• Supported risk assessments and the development of controls addressing identified cybersecurity and information-security risks.
• Introduced pre- and post-production security implementation for the Compliance and Security Monitoring Command Center, reviewed execution, and provided guidance on privacy and security alignment.
• Coordinated technology, privacy, security, and organizational stakeholders on digital systems and technology initiatives.
• Advised on institutionalizing the Data Protection Officer function in government.
• Participated in the delegation hosting the National Privacy Commission-hosted Global Privacy Assembly Dialogue in the Philippines in 2025.

March 2021 – September 2024

Philippines

National Privacy Commission

Information Technology Officer III

Designation: Chief, Compliance and Monitoring Division

• Led compliance monitoring, breach-notification processing, registration, compliance support, and regulatory reporting operations.
• Conducted and oversaw privacy, security, technology, and compliance assessments across high-volume operational workflows.
• Led development and implementation of the Data Breach Notification Management System and the National Privacy Commission Registration System.
• Increased new Data Protection Officer registrations from 631 in 2020 to 1,498 in 2021.
• Supported more than 10,000 Data Processing System (DPS) and Data Protection Officer (DPO) registrations by 30 September 2024 after the registration system launched in 2023.
• Raised 2021 compliance-check completions from a target of 350 personal information controllers to 685 PICs.
• Presented Philippine data-breach and compliance developments and the Data Breach Notification Management System (DBNMS) and National Privacy Commission Registration System (NPCRS) at Global Privacy Assembly (GPA) meetings from 2021 through 2024.
• Prepared the 2023 DBNMS Innovation and 2024 NPCRS Accountability award entries. DBNMS was a 2023 GPA Global Privacy and Data Protection Awards Innovation finalist.
• Represented the Philippines in Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) discussions and reported jurisdictional updates at a 2024 APEC digital-economy meeting in Peru.
• Represented the Philippines at the 2023 GSMA Ministerial Programme and served as a panelist in a discussion on the metaverse.

January 2017 – July 2020

Philippines

Bankmer Realty Corporation

Director of Operations

Additional functions: Head, Legal and Compliance; Designated Data Protection Officer

• Established the organization’s first Privacy Management Program, including privacy governance, policies, security procedures, data-handling standards, employee training, and accountability controls.
• Conducted privacy and operational risk assessments and translated findings into corrective actions and improved data-governance practices.
• Modernized records handling, infrastructure, and vendor oversight in support of operational and information-security practice.

March 2015 – December 2016

Philippines

Bankmer Realty Corporation

Corporate Counsel

Additional functions: Facilities Manager; Head, Information Technology

• Planned IT and information-security improvements and digitalized corporate records to protect confidential organizational information.
• Coordinated technology vendors, contracts, regulatory requirements, and implementation activities involving confidential organizational information.

November 2013 – February 2015

Philippines

Bankmer Realty Corporation

Compliance Officer

• Researched privacy and regulatory requirements and evaluated organizational legal, operational, documentation, and information-management risks.
• Developed risk-mitigation recommendations and supported compliance implementation.

July 2018 – June 2020

Philippines

Scionetrade Corporation

Legal Consultant

Additional designation: Data Protection Officer · Contract / Project – Part-Time

• Advised a security and technology solutions provider on cybersecurity, data privacy, and vendor-facing technology engagements.