{"id":3063559,"url":"https://alion.io/job/cloudstaff-data-protection-officer-cyber-security-lead","title":"Data Protection Officer & Cyber Security Lead","company":{"id":50080,"name":"Cloudstaff","domain":"cloudstaff.com","url":"https://alion.io/company/cloudstaff","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":75,"open_postings":124,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Angeles City, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":49000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-08T04:07:03Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T08:00:27Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"We are currently on the lookout for a new Data Protection Officer & Cyber Security Lead to join our team at Cloudstaff, the #1 Workplace Everywhere!\nReports to: Office of the CEO (line manager). Functional reporting to IT for cyber security operations.\nPurpose of the role:\nThe organisation provides surgical and non-surgical medical aesthetic treatments through a growing network of clinics. Its patients include high-profile individuals and international patients. \nThis role has two accountabilities: data protection and cyber security. You are the Data Protection Officer and the accountable lead for cyber security. Both accountabilities protect the same assets: patient health and treatment data, patient confidentiality, and the clinical and business systems that the clinics depend on. \nThe role covers operation and assurance. You do the work, and you check that controls and processes work as intended. \nRegulatory commitment:\nThe organisation complies with the Data Privacy Act of 2012, its Implementing Rules and Regulations and issuances of the National Privacy Commission. This covers DPO designation, registration of data processing systems, security of personal data and personal data breach management. You are accountable for maintaining this compliance. \nAs in the rest of the business, the organisation leads rather than lags. You will go beyond minimum compliance and set the standard for data protection and cyber security in medical aesthetics in the Philippines. \nAccountability 1: Data protection\nDPO registration and the registration of all data processing systems with the NPC are complete and current. You are the contact point for data subjects and the NPC. \nThe record of processing activities is accurate, including systems, data flows and where data is hosted. Transfers of personal data outside the Philippines are controlled. \nNew and changed systems, services, suppliers and clinics are assessed through Privacy Impact Assessments and built with privacy by design. \nEvery processing activity has a lawful basis, a clear purpose, valid consent where required, and uses only the data it needs. \nData subject requests and complaints are handled from receipt to closure within the required timeframes. \nThird parties that process personal data are covered by suitable data sharing or outsourcing agreements and comply before and during the contract. \nPersonal data breaches are assessed, notification decisions are made, and reports reach the NPC and affected data subjects within the required timeframes. \nThe privacy manual, privacy notices, retention rules and policies are current. Compliance is monitored and audited, corrective actions are closed, staff are trained, and Compliance Officers for Privacy are supervised where appointed. \nAccountability 2: Cyber security\nCyber security risk is known, assessed and treated through the cyber risk register and the security roadmap. \nSecurity policies and standards are current and aligned to a recognised framework such as ISO/IEC 27001 or the NIST Cybersecurity Framework. The information asset register is complete. \nSystems, cloud, network, endpoints, email, backup and logging meet the organisation's security requirements, including new systems, major changes and new clinics before go-live. \nAccess to systems and data is controlled, including privileged access, joiners, movers and leavers, and regular access reviews. \nVulnerabilities are controlled through patching, vulnerability assessments and penetration tests, with remediation tracked to closure. \nSecurity incidents are detected, contained and recovered from quickly, using tested response plans, so that clinical and business systems stay available. \nSuppliers meet the organisation's security requirements before contract, in contract terms and at each review. \nSecurity controls are tested to confirm they work as intended, and staff security awareness is built through training and phishing exercises. \nOperating model:\nData protectionYou lead data protection directly. You work with business owners, IT and legal counsel, and supervise Compliance Officers for Privacy where appointed. \n\nCyber securityThe organisation has a strategic engagement with a qualified third party that provides cyber security resources, expertise and oversight. In the long term, this engagement will provide around 50% of cyber security resources. In the interim, additional cyber security capacity is likely to be agentic. You remain accountable for cyber security and work with the third party and IT. \n\nWays of workingAcross both accountabilities, you improve processes and apply AI-enabled tools and automation where they add value. \n\nReportingYou report on data protection and cyber security risk and performance to the Office of the CEO, and on cyber security operations to IT. \n\nGrowth and learningThe medical aesthetics field is growing, and the organisation is growing with it. You will learn and grow with the business. \nAI brings new challenges for both data protection and cyber security. You will build capability in this area and keep a good understanding of new technology trends. Beginning to understand medical technology would be very helpful.\n\nQualifications\nEssential:\nAt least 10 years' working experience in a regulated industry. \nExperience in a role where you were accountable for data protection. You can give examples of compliance you maintained, assessments you led, and breaches or requests you handled. \nA recognised data protection qualification, for example NPC DPO ACE, IAPP CIPP/A, CIPM or CIPT. \nYou can apply the Data Privacy Act of 2012, its IRR and NPC issuances to practical cases. \nYou can explain common cyber security controls and how you would respond to a security incident. \nYou can show hands-on work you did yourself, not only work you managed. This is not a hands-off role. \nYou can give examples of explaining data protection and cyber security risk to business executives and influencing their decisions. \nYou can give examples of using AI tools, automation or AI-enabled processes to improve and operate processes. \nDesirable:\nHealthcare industry experience. \nCyber security responsibility in a previous role. \nEducation:\nA bachelor’s degree in information technology, computer science, computer engineering or a related field. \nSoft skills:\nCustomer service: you are helpful and respond quickly to clinic staff and colleagues. \nCommunication: you speak and write clearly, and explain technical issues in simple language. \nTeamwork: you work well with people from different teams and backgrounds, and share information. \nTact and courtesy: you stay calm and polite, especially when staff are under pressure. \nInitiative: you plan and do your work without detailed instructions, and suggest improvements. \nOrganisation: you manage several tasks at once and set the right priorities. \nFlexibility: you are open to change and adjust quickly when the business needs it. \nPerks and benefits\nComprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment\nUp to 24 leave credits per year\nFlexible leave credits which may be used for vacation, emergency and sick leaves\nSuperb and exciting Mid-Year Parties - with items to give away and cash prizes!\nEndless opportunities for career advancement\nExclusive ATM inside the office for employee's convenience\nAnnual Performance Review with Salary Increase\nWe set you up for success with a company-provided PC/Laptop and fiber internet connection\nLook forward to weekly office perks for work from office staff - Free Coffee, Meals and Beer Fridays!\nTop notch workplace with first class VIP lounge and game rooms\nChild friendly spaces to cater to the needs of employees with children, enhancing work-life balance\nParticipate and join our CS Social Clubs and Special Interest Groups to connect with colleagues\nInternational career growth and connections\nUnlimited cash incentives for hired referrals\nMental Wellness Employee Assistance program through Lifeworks\nIn-house psychiatrist available to support employees' well-being\nBecome part of the Employee Share Units program\nCloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.\nCloudstaff : Build Your Career, Anywhere\nEstablished in 2005, Cloudstaff is a leading outsourcing company that empowers businesses to thrive through smarter talent solutions. We're passionate about creating a work environment that fosters your professional growth and overall well-being.\nWhy Cloudstaff is the #1 Workplace?\nAward-winning Culture: We're committed to building the #1 Workplace Everywhere, with a proven track record of staff engagement initiatives and industry recognition \nInvest in You: We support your development through comprehensive training programs, mentoring and opportunities for career advancement \nThrive as an Individual: We offer a strong work-life balance with flexible schedules, meaningful perks and a collaborative team environment","description_format":"text","description_chars":9018,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-22T07:14:54Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.569,"p_room":0.75,"age_days":19,"expected_fill_days":22,"reasons":["conf:2","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/cloudstaff-data-protection-officer-cyber-security-lead","json_url":"https://alion.io/job/cloudstaff-data-protection-officer-cyber-security-lead.json","meta":{"generated_at":"2026-10-27T10:39:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12354,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50080},"rest":"https://alion.io/mcp/rest/get_company?id=50080"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudstaff-data-protection-officer-cyber-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudstaff-data-protection-officer-cyber-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudstaff-data-protection-officer-cyber-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudstaff-data-protection-officer-cyber-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudstaff-data-protection-officer-cyber-security-lead"}]}