Compliance Analyst

Eastvantage Careers; Manila; On-site; PHP 480,000 - 720,000; Full time

Job summary

Eastvantage Careers is seeking a Compliance Analyst to support the Compliance Manager in conducting regular audits, ensuring regulatory alignment, and reporting findings. The role involves coordinating with multiple departments, maintaining ISO/PCI DSS certifications, and upholding DPA and GDPR privacy standards.

The candidate will assist in documenting processes, preparing audit plans, and communicating recommendations to top management while maintaining strong stakeholder relationships.

Qualifications

• At least 3 years of professional experience in internal audit and compliance roles.
• Familiarity with laws and policies related to information security and data protection.
• Knowledge of information security and data protection best practices.
• Experience with ISO certification and ISO standards.
• Strong communication and analytical skills.
• Attention to detail and professional demeanor.

Responsibilities

• Assist in conducting regular audits with the Compliance Manager.
• Interface between departments to ensure documentation meets requirements.
• Support ISO 27001 and PCI DSS certification efforts.
• Act as Privacy Officer for DPA and GDPR compliance.
• Prepare audit plans, checklists, and conduct audits accordingly.
• Monitor corrective action plans and process improvements.
• Prepare and distribute audit reports to stakeholders.
• Assist in documenting processes and controls.

Skills

Internal audit

Compliance

Data protection

Analytical

Communication

Problem solving

Attention to detail

Proactive

Job description

The Compliance Analyst is tasked to assist the Compliance Manager in conducting regular audits aligned with the company's existing processes, ensuring compliance with standards and regulatory requirements, reporting audit findings, recommending improvements, and assisting Process Champions and other internal stakeholders in process or policy documentation.

• Interface between different departments, and a reporter of fact to confirm that Eastvantages documentation meets requirements and that day-to-day operations follow the documentation.
• Assist in conducting activities to maintain Eastvantage international certifications on ISO 27001 and PCI DSS, and ensure strict compliance with the Philippines Data Privacy Act (DPA) of 2012 and the European Union General Data Protection Regulation (GDPR).
• Act as the Compliance Officer for Privacy (COP) for the company, in compliance with the Philippines DPA of 2012 (R.A. 10173).
• Assist in the preparation of the documentation requirements and facilitates the registration of the company with the National Privacy Commission (NPC)
• Assist in the creation of an annual audit programme; and conduct internal audits at least twice a year, or as planned or as advised by the top management;
• Assist in preparing the audit plan, audit checklists, and conducting audits accordingly.
• Monitor and assist in the planning and implementation of preventive and corrective action plans in line with the identified process improvement or audit findings.
• Prepare and distribute reports to the Compliance Officer, Compliance Manager, Top Management, and other relevant stakeholders.
• Assist in the strengthening of stakeholders and client relationships through constant communication and feedback, consultative meetings, and other engagement activities.
• Assisting the department Process Champion(s) in the documentation of processes and control points.
• Conducts gap assessment and root-cause analysis for problem-solving, timely resolution, and communicating potential issues to his/her manager.
• Assist in monitoring compliance with regulations and controls by examining and analyzing records, reports, operating practices and procedures, and documentation.
• Assist in analyzing and assessing information obtained through interviews, observations and inspections.
• Adheres to all regulatory and privacy policies, requirements, and standards in maintaining compliance with ISO, PCI DSS, DPA and GDPR.
• Perform other duties and tasks that may be assigned by his/her manager or top management that will further the interest of information security and data protection.

Position requirements:

• At least 3 years of professional experience in internal audit and compliance roles or any related field.
• Familiarity with the applicable laws and policies in relation to the information security controls and data protection requirements.
• Knowledge of information security and data protection best practices.
• Understanding of the concepts of continual improvement (system improvement).
• Have experience in internal/process auditing, ISO certification and ISO standards.
• Critical thinking, responsiveness, perseverance, and resourcefulness in case of a breach.
• Excellent and effective verbal, written, interpersonal communication and presentation skills.
• Possess strong analytical and problem-solving abilities, must be independent and proactive.
• Attended ISO-related training(s) and holds ISO certification as a PLUS.
• Must be keen on details and highly organized.
• Must have a strong sense of professionalism.