Privacy, Compliance & Assurance

Principal Consultant

Independent Consulting Practice

• Assess cybersecurity, privacy, and technology-risk issues for regulated and high-risk organizations and translate findings into governance, control, and remediation work.
• Conduct risk assessments and translate findings into prioritized remediation actions, implementation roadmaps, and measurable controls.

Innovation and Transformation Consultant

Designation: Chief Information Technology Officer

• Assessed cybersecurity, privacy-compliance, and technology-risk issues and advised on control implementation and critical-infrastructure protection.
• Advised on institutionalizing the Data Protection Officer function in government.

Information Technology Officer III

Designation: Chief, Compliance and Monitoring Division

• Led compliance monitoring, breach-notification processing, registration, compliance support, and regulatory reporting operations.
• Conducted and oversaw privacy, security, technology, and compliance assessments across high-volume operational workflows.
• Presented Philippine data-breach and compliance developments and the Data Breach Notification Management System (DBNMS) and National Privacy Commission Registration System (NPCRS) at Global Privacy Assembly (GPA) meetings from 2021 through 2024.
• Prepared the 2023 DBNMS Innovation and 2024 NPCRS Accountability award entries. DBNMS was a 2023 GPA Global Privacy and Data Protection Awards Innovation finalist.
• Represented the Philippines in Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) discussions and reported jurisdictional updates at a 2024 APEC digital-economy meeting in Peru.

Director of Operations

Additional functions: Head, Legal and Compliance; Designated Data Protection Officer

• Established the organization’s first Privacy Management Program, including privacy governance, policies, security procedures, data-handling standards, employee training, and accountability controls.
• Conducted privacy and operational risk assessments and translated findings into corrective actions and improved data-governance practices.

Corporate Counsel

Additional functions: Facilities Manager; Head, Information Technology

• Planned IT and information-security improvements and digitalized corporate records to protect confidential organizational information.
• Coordinated technology vendors, contracts, regulatory requirements, and implementation activities involving confidential organizational information.