Governance, risk, and privacy work in practice.

October 2024 – Present

Remote

RAM Privacy & Security

Principal Consultant

• Assess cybersecurity, privacy, and technology-risk issues for regulated and high-risk organizations and translate findings into governance, control, and remediation work.
• Conduct risk assessments and translate findings into prioritized remediation actions, implementation roadmaps, and measurable controls.
• Develop policies, standards, procedures, incident-readiness materials, and executive reports; support third-party risk, audit readiness, regulatory compliance, and stakeholder coordination.

October 2024 – January 2026

Philippines

National Privacy Commission

Innovation and Transformation Consultant

Designated Chief Information Technology Officer

• Assessed cybersecurity, technology-risk, and information-security issues and advised on control implementation and critical-infrastructure protection.
• Supported risk assessments and the development of controls addressing identified cybersecurity and information-security risks.
• Directed pre- and post-production security implementation for the Compliance and Security Monitoring Command Center, supporting centralized monitoring and remediation workflows.
• Coordinated technology, privacy, security, and organizational stakeholders on digital systems and technology initiatives.
• Advised on institutionalizing the Data Protection Officer function in government.

March 2021 – September 2024

Philippines

National Privacy Commission

Chief, Compliance and Monitoring Division

• Led compliance monitoring, breach-notification processing, registration, compliance support, and regulatory reporting operations.
• Conducted and oversaw privacy, security, technology, and compliance assessments across high-volume operational workflows.
• Led development and implementation of the Data Breach Notification Management System and the National Privacy Commission Registration System.
• Increased new Data Protection Officer registrations from 631 in 2020 to 1,498 in 2021.
• Supported more than 10,000 DPS and DPO registered entities by 30 September 2024 after the registration system launched in 2023.
• Raised 2021 compliance-check completions from a target of 350 personal information controllers to 685 PICs.

January 2017 – July 2020

Philippines

Bankmer Realty Corporation

Director of Operations & Data Protection Officer

• Established the organization’s first Privacy Management Program, including privacy governance, policies, security procedures, data-handling standards, employee training, and accountability controls.
• Conducted privacy and operational risk assessments and translated findings into corrective actions and improved data-governance practices.
• Modernized records handling, infrastructure, and vendor oversight in support of operational and information-security practice.

March 2015 – December 2016

Philippines

Bankmer Realty Corporation

Corporate Counsel / Facilities Manager

• Planned IT and information-security improvements and digitalized corporate records to protect confidential organizational information.
• Coordinated technology vendors, contracts, regulatory requirements, and implementation activities involving confidential organizational information.

November 2013 – February 2015

Philippines

Bankmer Realty Corporation

Compliance Officer

• Researched privacy and regulatory requirements and evaluated organizational legal, operational, documentation, and information-management risks.
• Developed risk-mitigation recommendations and supported compliance implementation.

2018 – 2020

Philippines

Scionetrade Corporation

Legal Consultant — Cybersecurity & Data Privacy Advisory

• Advised a security and technology solutions provider on cybersecurity, data privacy, and vendor-facing technology engagements.