Rainier (Ram) Milanes

READY NOW. BUILT TO ADAPT.

Privacy, Governance & Information Systems

Privacy professional, former Philippine privacy regulator, and Northwestern MSIS graduate. My career spans corporate legal and operational work, privacy programs, regulatory leadership, consulting, and technical implementation.

  • Privacy Operations
  • GRC
  • IT Risk
  • Security Compliance
  • Risk & Control Assessment
Explore my careerView projects
Professional portrait of Rainier Milanes.

Professional evidence

Selected experience

Roles across corporate legal and operational work, privacy programs, regulatory leadership, consulting, technical implementation, and university service.

RAM Privacy & Security

Independent Consultant

October 2024 – Present

  • Conduct risk assessments and translate findings into prioritized remediation actions, implementation roadmaps, and measurable controls.
  • Develop policies, standards, procedures, incident-readiness materials, and executive reports; support third-party risk, audit readiness, regulatory compliance, and stakeholder coordination.

National Privacy Commission

Innovation and Transformation Consultant

Designation: Chief Information Technology Officer

October 2024 – January 2026

  • Supported risk assessments and the development of controls addressing identified cybersecurity and information-security risks.
  • Introduced pre- and post-production security implementation for the Compliance and Security Monitoring Command Center, reviewed execution, and provided guidance on privacy and security alignment.

National Privacy Commission

Information Technology Officer III

Designation: Chief, Compliance and Monitoring Division

March 2021 – September 2024

  • The division completed 641 compliance checks against a 2021 target of 350, approximately 83% above target.
  • Sponsored the Data Breach Notification Management System and the NPC Registration System, coordinating planning and implementation.
View full experience

Role focus

Explore areas of my work.

These pages are optional ways to explore the same career record.

Professional Focus

Privacy, Compliance & Assurance

For privacy operations, privacy compliance and assurance, breach governance, regulatory systems, and cross-border privacy engagement.

  • Privacy Operations
  • Privacy Compliance
  • Privacy Assurance
  • Remediation
  • Cross-Border Privacy
View this track

Professional Focus

GRC, IT Risk & Security Compliance

For GRC, IT risk, technology risk, security compliance, controls, assurance, audit readiness and remediation.

  • GRC
  • IT Risk
  • Security Compliance
  • Risk & Control Assessment
View this track

Applied implementation

PrivAI Guard | Northwestern MSIS Capstone | 2026

Employee use of public AI tools often outpaces the privacy and governance controls around them.

Built a cloud-deployed privacy-risk triage application using Next.js, React, TypeScript and Supabase/PostgreSQL. Implemented role-based access control, PostgreSQL row-level security and audit logging, with risk scoring, human review and remediation evidence workflows.

  • Shows that governance requirements can be translated into a working technical system.
  • Structured risk review and remediation with a human decision path.
  • Not automated legal or regulatory decisioning.
  • Next.js
  • React
  • TypeScript
  • Supabase/PostgreSQL
  • Vercel
  • GitHub

Northwestern MSIS capstone — cloud-deployed non-production MVP. Synthetic demonstration data only. Human governance review — not automated legal or regulatory decisioning.

Read the PrivAI Guard case study
PrivAI Guard employee Safe Prompt Check screen
Employee Safe Prompt Check — evaluates proposed AI use before information is submitted to an AI tool.

Supporting evidence

  • Data Breach Notification Management System

    National breach-notification portal

    Role / contribution. Sponsored the system, coordinating planning and implementation.

    • Breach notification
    • Incident reporting
    • Privacy operations
    • Regulatory implementation
    View the breach-notification system on Projects

  • milanesram.com — Secure Portfolio & Content Management Platform

    Production portfolio and owner-managed CMS

    Role / contribution. Designed, implemented, and currently maintains the production site and owner CMS.

    • Supabase Auth
    • Row-Level Security
    • Supabase/PostgreSQL
    • Vercel
    View the production CMS on Projects
View all projects

Credentials

Education and certifications

Formal credentials that support the professional record.

Education

Master of Science in Information Systems, Security Specialization

Northwestern University · 2026

Certification

Certified Information Privacy Manager (CIPM)

IAPP

Certification

Certified in Cybersecurity (CC)

ISC2

View credentials

Ready now. Built to adapt.

The underlying work is already familiar: privacy and compliance operations, risk and control assessment, remediation, governance, and implementation support.

View resume optionsContactmilanesram@gmail.comLinkedIn