Data Privacy Compliance Senior Specialist

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

About FWD Life Philippines

FWD Life Insurance Corporation (FWD Life Philippines) launched its commercial operations in September 2014. As of end-2022, FWD Life Philippines ranks 3rd and 6th in terms of Paid-up Capital(1) and New Business Annual Premium Equivalent(2), respectively.

For more information, please visit fwd.com.ph .

1 www.insurance.gov.ph > Statistics > Life > 2022 > Based on Paid-Up Capital

2 www.insurance.gov.ph > Statistics > Life > 2022 > Based on New Business Annual Premium Equivalent

The role is accountable for the day-to-day operation, execution, and continuous strengthening of the Company’s Data Privacy and Regulatory & Corporate Compliance frameworks.

The role will take ownership of privacy program implementation and regulatory & corporate compliance execution, ensuring continuity, consistency, and defensibility of the Company’s compliance posture during the current transition period.

Success in this role is measured by

• Ability to operate independently with minimal supervision
• Timely and accurate execution of privacy and regulatory obligations
• Clear compliance judgment and decision support to the business
• Strengthening of privacy and compliance controls and processes
• Exercise independent judgment in prioritization and escalation of compliance matters

This role is expected to deliver immediate operational stability while supporting the transition to the target compliance operating model. Data Privacy Operations and Program Support

• Own day-to-day operations and execution of the Data Privacy and Regulatory & Corporate Compliance frameworks
• Review, monitor, and track Privacy Impact Assessments (PIAs), including periodic reviews and annual confirmations
• Own and maintain privacy-related documentation, trackers, registers, and reports (e.g., RoPA, incident logs, compliance dashboards)
• Lead and coordinate compliance-related meetings, trainings, and awareness activities
• Provide clear compliance position and decision support to business units, including risk-based guidance on data privacy and regulatory requirements

Regulatory and Stakeholder Engagement

• Manage regulatory coordination and ensure timely and complete submission of all regulatory & corporate requirements, including reporting cycles and scheduled submissions
• Monitor relevant laws, regulations, and issuances; perform regulatory gap analysis and support implementation of required actions

Cross- Functional Coordination

• Collaborate with Compliance, Risk, Information Security, Legal, and business units to facilitate timely review and clearance of projects, initiatives, and materials requiring compliance input
• Ensure alignment with Group Compliance

Other Duties and Compliance Plan Execution

• Act as interim stabilizer across Data Privacy and Regulatory & Corporate Compliance domains during the transition period, ensuring continuity of operations and regulatory coverage
• Execute activities under the annual Compliance Plan, including tracking and reporting progress
• Perform other duties as assigned by the Head of Compliance and Chief Legal and Compliance Officer

JOB REQUIREMENTS

• Bachelor’s degree in Business, Finance, Legal Management, or a related field
• Relevant certifications (e.g., data privacy, compliance, risk management) are an advantage
• Experience: [Provide minimum experience level requirement for the role. e.g. professional, special training and equivalencies.]
• At least 6–8 years’ experience in compliance, risk, audit, or related functions
• At least 3–5 years in data privacy or regulatory compliance
• Experience handling regulatory interactions and compliance program implementation
• Ability to operate effectively in a transitioning environment and take ownership of multiple compliance domains (Data Privacy and Regulatory & Corporate Compliance)
• Demonstrated ability o operate in fast-paced or transitioning environments with minimal ramp-up

REQUIRED COMPETENCIES

• Strong organizational and time management skills with the ability to manage multiple priorities and deadlines
• High attention to detail, particularly in documentation and compliance requirements
• Must have the aptitude and desire to learn new competencies and skills
• Strong stakeholder engagement and cross-functional collaboration skills
• Ability to analyze regulatory issuances and translate them into actionable requirements
• Experience in privacy program implementation (e.g., PIA, incident management, data inventory) is an advantage
• Good understanding of data privacy laws and regulatory frameworks (e.g., Philippine Data Privacy Act and NPC issuances)