Compliance Analyst

Satellite Office; Pasig; On-site; PHP 1,500,000 - 2,100,000; Full time

Job summary

Satellite Office in Pasig, Metro Manila, is seeking an IT Compliance and Audit Lead to oversee internal and external IT audit activities.

The role focuses on designing robust audit plans, coordinating audit actions, and ensuring PCI compliance across the group. You will collaborate with stakeholders to improve policies, reporting, and data protection measures.

Qualifications

• Design and deliver a robust internal IT audit plan.
• Oversee PCI compliance processes and attestations.
• Coordinate audit findings and actions across the organization.

Responsibilities

• Design and facilitate internal IT audit plan.
• Serve as liaison for internal/external audit activity across the organization.
• Coordinate oversight, tracking and delivery of management actions from audits.
• Maintain a central register of IT controls supporting risk management and regulatory obligations.
• Improve documentation of internal audit processes.
• Examine and improve IT policies and procedures.
• Align IT standards with customer expectations.
• Develop reporting methodologies for end customers.
• Run weekly, monthly, quarterly audit reporting cycles.
• Manage PCI compliance processes and attestations.
• Consult with external PCI consultants on standards and best practices.
• Manage PCI data loss prevention filters to prevent prohibited card-related data.
• Foster adherence to PCI-DSS requirements and communicate PCI initiatives.
• Onboard new brands/regions to centralized PCI processes.
• Support tabletop exercises to test PCI process adherence.

Job description

To oversee the internal and external IT compliance and audit processes and frameworks

.

Role Accountabilities

Accountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group’s PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.

• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.