Aldwin Sagedao

Governance, Risk, Compliance, and Data Privacy professional with extensive experience in Enterprise Risk Management, Data Protection Compliance, Legal and Regulatory Review, Policy Development, Information Security Governance, Business Continuity, and Occupational Safety oversight. Currently serving as Acting Chief Risk Officer, Senior Manager for Risk, Data Protection Officer, and Safety Officer at DigiPlus Interactive Corp. Leads and supports corporate risk governance, data privacy compliance under the Data Privacy Act of 2012, National Privacy Commission requirements, contract privacy review, policy formulation, risk register management, and executive reporting.

Strong legal writing, policy development, documentation, and compliance background from both corporate and public sector environments.

Acting Chief Risk Officer, Senior Manager, Risk Department - DigiPlus Interactive Corp.

(2025-02)

• Leads enterprise-wide risk management activities, including risk identification, assessment, treatment monitoring, and management reporting.
• Oversees risk governance frameworks aligned with business objectives, regulatory expectations, and corporate resilience requirements.
• Manages risk register activities, including coordination with business units, risk owners, and senior management.
• Provides guidance on operational, regulatory, business continuity, safety, data privacy, and information security-related risks.
• Supports board and management reporting through risk summaries, risk appetite updates, risk treatment monitoring, and governance recommendations.
• Coordinates cross-functional risk concerns with Legal and Compliance, Information Security, Human Resources, Operations, Internal Audit, and business units.

Data Protection Officer for DigiPlus / BingoPlus Foundation / Property Group - DigiPlus Interactive Corp.

(2023-04)

• Leads the organization's data privacy compliance program in line with the Data Privacy Act of 2012, National Privacy Commission issuances, and internal privacy governance requirements.
• Reviews contracts, service agreements, data processing arrangements, data sharing arrangements, privacy clauses, confidentiality provisions, subcontracting terms, breach notification clauses, retention provisions, and cross-border data transfer concerns.
• Provides privacy guidance on vendor engagements, third-party processors, system implementation, data sharing, marketing activities, customer service processes, and operational data handling.
• Oversees and supports Privacy Impact Assessments for systems, vendors, processes, and business initiatives involving personal data.
• Advises business units on lawful basis, transparency, data minimization, proportionality, retention, disposal, data subject rights, and privacy-by-design requirements.
• Develops and reviews privacy-related policies, notices, manuals, templates, and compliance documentation.
• Coordinates with Legal and Compliance, Information Security, business units, and system owners to address privacy risks and required mitigating controls.

Safety Officer - DigiPlus Interactive Corp.

(2023-11)

• Leads occupational safety and health initiatives to support compliance with applicable Department of Labor and Employment and Occupational Safety and Health standards.
• Chairs and supports D-REACT, the company's safety and emergency preparedness committee.
• Coordinates safety compliance activities, incident reporting, workplace safety reminders, emergency preparedness initiatives, and safety documentation.
• Supports business continuity and emergency response planning with business units, Admin, Human Resources, and operating teams.
• Assists in the development and review of safety-related policies, workplace protocols, incident reporting procedures, and emergency preparedness guidelines.

Manager, Risk Department - DigiPlus Interactive Corp.

(2023-02 - 2025-02)

• Managed enterprise risk management initiatives, including departmental risk assessments, risk documentation, and treatment monitoring.
• Supported the development of risk management policies, procedures, templates, and governance materials.
• Coordinated with business units to identify operational, regulatory, compliance, information security, safety, and continuity-related risks.
• Prepared risk reports and management updates to support decision-making and oversight.
• Supported policy development work involving risk management, data privacy, business continuity, safety, and incident management.
• Coordinates cross-functional risk concerns with Legal and Compliance, Information Security, Human Resources, Operations, Internal Audit, and business units.

Information Systems Analyst III, Corporate Information Security Department - Philippine Health Insurance Corporation

(2014-11 - 2023-02)

• Supported information security, risk management, compliance, and technical governance activities.
• Assisted in the development, review, and documentation of information security policies, procedures, plans, and compliance materials.
• Coordinated project timelines, documentation requirements, and technical submissions involving information systems and security-related initiatives.
• Supported risk assessment, technical analysis, policy analysis, information security monitoring, and compliance documentation.
• Prepared reports, memoranda, policy documents, and other written outputs requiring technical accuracy and regulatory alignment.

Social Insurance Specialist, Corporate Information Security Department - Philippine Health Insurance Corporation

(2007-09 - 2014-11)

• Supported corporate planning, budgeting, reporting, and administrative coordination within the Corporate Information Security Department.
• Assisted in policy documentation, legal writing, internal communications, and compliance support activities.
• Prepared reports, records, correspondence, and governance-related documentation.
• Coordinated with internal offices on operational, administrative, and compliance requirements.

Clerk / Records Officer I - Philippine Health Insurance Corporation

(1998-09 - 2007-09)

• Supported records management, document control, filing, tracking, and retrieval of official records.
• Assisted in legal writing, document preparation, case file management, and administrative coordination.
• Handled confidential records and official documents with attention to accuracy, control, and proper documentation.
• Supported grievance, appeals, records, and governance-related office functions.

Master of Public Administration - Philippine Christian University (2003 - 2006)

Bachelor of Science - Business Administration and Management - International Academy of Management and Economics (2000 - 2002)

Computer Science Coursework, 4th Year Undergraduate - Computer Science - Adamson University (1994 - 1998)