Job Description

Risk and Compliance Officer

Department: I.T. (Information Technology)

Employment Type: Full Time

Location: Cebu, PH

We are seeking a highly skilled and experienced Risk and Compliance Officer at the Manager level to lead and execute risk assessments and audits across internal business units and external client engagements. This role is critical in ensuring our operations remain compliant with international regulatory standards and client-specific requirements, particularly those from the US and UK. The ideal candidate will have a strong background in regulatory frameworks, risk management, and BPO operations.

Key Responsibilities

• Lead and conduct risk assessments and internal audits across various departments and client accounts.
• Develop and implement risk mitigation strategies and compliance programs tailored to BPO operations.
• Lead the development, implementation, and maintenance of the company’s Business Continuity Plan (BCP) and Disaster Recovery (DR) strategies to ensure operational resilience.
• Ensure adherence to international regulatory frameworks such as GDPR, HIPAA, PCI-DSS, and other client-specific compliance requirements.
• Collaborate with client compliance teams to align internal processes with external expectations.
• Monitor and report on compliance metrics, audit findings, and risk indicators to senior management.
• Provide training and guidance to internal teams on compliance best practices and regulatory updates.
• Stay updated on changes in global compliance standards and assess their impact on business operations.
• Manage incident investigations and support remediation efforts.
• Prepare detailed audit reports and risk assessments for internal and external stakeholders.

Skills, Knowledge and Expertise

Qualifications:

• Bachelor’s degree in Business Administration, Law, Finance, or related field (Master’s degree or certifications like CISA, CRISC, or CIA is a plus).
• Minimum of 5 years of experience in risk management, compliance, or internal audit, preferably in a BPO or shared services environment.
• Strong understanding of US and UK regulatory frameworks and data protection laws.
• Proven experience in conducting audits, risk assessments, and compliance reviews.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Preferred Skills:

• Familiarity with ISO standards (e.g., ISO 27001, ISO 9001).
• Experience with compliance tools and audit management systems.
• Strong project management and leadership capabilities.