The Information Security and Data Privacy O:icer (ISDPO) is responsible for ensuring the confidentiality, integrity, and availability of sensitive information and data within the organization. The ISDPO will develop, implement, and maintain information security and data privacy policies, procedures, and controls to ensure compliance with relevant regulations, standards, and industry best practices. The ISDPO will also serve as a subject matter expert on HIPAA, SOC II, GDPR, and other compliance requirements.

• Health Insurance/HMO
• Enjoy unlimited MadMax Coffee
• Diverse learning & growth opportunities
• Accessible Cloud HR platform (Sprout)
• Above standard leaves
• Miscellaneous allowance
• Loans

• Compliance and Risk Management:
  • Develop and maintain a comprehensive information security and data privacy program that ensures compliance with HIPAA, SOC II, GDPR, and other relevant regulations and standards.
  • Identify and assess information security and data privacy risks, and develop strategies to mitigate or remediate those risks.
  • Conduct regular risk assessments and vulnerability assessments to identify potential security threats and weaknesses.
• Policy and Procedure Development:
  • Develop, implement, and maintain information security and data privacy policies, procedures, and standards that align with industry best practices and regulatory requirements.
  • Ensure that all policies and procedures are reviewed, updated, and approved on a regular basis.
• Incident Response and Management:
  • Develop and maintain an incident response plan that outlines procedures for responding to security breaches, data breaches, and other security incidents.
  • Coordinate incident response activities, including containment, eradication, recovery, and post-incident activities.
  • Conduct incident response training and awareness programs for employees.
• Security Awareness and Training:
  • Develop and implement security awareness and training programs for employees, including phishing simulations, security training, and data privacy training.
  • Ensure that all employees understand their roles and responsibilities in maintaining information security and data privacy.
• Audit and Compliance:
  • Conduct regular audits and assessments to ensure compliance with information security and data privacy policies, procedures, and regulations.
  • Identify and report any non-compliance issues to management and recommend corrective actions.
• Vendor Management:
  • Develop and maintain vendor management policies and procedures that ensure vendors meet information security and
  • Conduct vendor risk assessments and due diligence to ensure vendors are compliant with relevant regulations and standards.
• Data Privacy:
  • Develop and maintain data privacy policies and procedures that ensure compliance with GDPR, HIPAA, and other relevant regulations.
  • Conduct data privacy impact assessments and risk assessments to identify potential data privacy risks.
• Communication and Collaboration:
  • Serve as a liaison between the IT department, business units, and other stakeholders to ensure e:ective communication and collaboration on information security and data privacy matters.
  • Provide guidance and support to employees on information security and data privacy best practices.
• Staying Current with Industry Developments:
  • Stay up-to-date with the latest industry developments, trends, and best practices in information security and data privacy.
  • Participate in industry conferences, webinars, and training programs to stay current with emerging threats and technologies 

• Bachelor's degree in Computer Science, Information Assurance, or a related field.
• Minimum 5 years of experience in information security, data privacy, or a related field.
• Strong knowledge of HIPAA, SOC II, GDPR, and other relevant regulations and standards.
• Experience with any information security and data privacy frameworks, such as NIST, ISO 27001, and COBIT.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work in a fast-paced environment and prioritize multiple tasks and projects.
• Certification in information security or data privacy, such as CISSP, CISM, or CIPP, is preferred
• BPO experience (and setting these compliances up), would be a plus!

As previously mentioned.

• Scanned copy of valid NBI Clearance
• Accomplished Medical or PEME Slip (covered by KMC)
• 2x2 & Half body picture with white background
• Proof of government numbers (TIN, SSS, Pag-ibig, & Philhealth)
• Photocopy of 2 valid IDs – front & back (government-issued)
• Clear copy of your Birth Certificate (PSA or NSO)
• Accomplished HR Forms & Promissory Note (will be provided by KMC’s Onboarding Team

If you're a rockstar at what you do and looking to be a part of our amazing story, we want to hear from you!

We offer attractive salaries and benefits plus you get to work in some of the Philippines' best flexible workspaces. Our employees also get to enjoy exclusive discounts, rewards and freebies, and invites to our monthly events. We are always recruiting for roles in IT & Development, Marketing, Business Administration, HR & Recruitment and Legal & Finance Roles.

KMC provides quality employment opportunities for job-seekers looking for a career that is both challenging and fulfilling. We are also committed to providing equal opportunities at every selection stage. We do not discriminate due to age, gender, sexual orientation, ethnicity, nationality, and religion.

KMC Solutions offers a variety of career opportunities in Metro Manila, Cebu and Clark & Iloilo. We are always looking for talented and enthusiastic individuals who are ready to make their next big career move.

At KMC, we foster an inclusive and positive workplace for all. We push our members to succeed in everything they do through our collaborative work environment. We encourage our community to work hard and reach their full potential while delivering results that matter for our members and you as professionals.

We host amazing and quality events and implement people-centric policies to work flexibly. We ensure that everyone in our expansive network is engaged, from our internal employees and those who work on behalf our offshore partners.

At KMC, we work hard and we are committed to putting our best foot forward in everything we do. Everyone is encouraged to be an individual while also working for the collective good of the KMC Community. We believe mistakes are opportunities and that you should not present a solution without a problem.

We also know when hard work deserves to be recognized so we reward our employees with monthly parties, free trips and much much more!