Compliance Implementation Associate-Cebu

iQor; Cebu City; On-site; PHP 420,000 - 640,000; Full time

Job summary

iQor in Cebu City seeks a Compliance Implementation Associate to execute day-to-day compliance, audit, risk governance, and IMS activities. You will coordinate with process owners, maintain evidence, track actions, and escalate gaps to ensure audit readiness and continual improvement of controls aligned with ISO 27001, PCI DSS 4.0, HIPAA/HITRUST, and SOC 2 Type II.

The role supports drafting and updating policies, processing requests within established SLAs, and communicating policy changes to

Qualifications

• Bachelor’s degree in Industrial Engineering, Computer Engineering, Information Technology, Business Administration, Accounting, or related field; equivalent relevant experience may be considered.
• 1–2 years of experience in compliance, internal audit, information security, risk management, quality management, document control, or related function preferred.
• Familiarity with ISO 27001, PCI DSS 4.0, SOC 2 Type II, HIPAA/HITRUST or an Integrated Management System is a plus.
• Relevant internship experience may be considered for candidates with strong analytical, documentation, and coordination skills.

Responsibilities

• Support internal and external compliance audits covering ISO 27001, ISO 22301, PCI DSS 4.0, SOC 2 Type II, and internal requirements.
• Collect, organize, validate, and maintain audit evidence in coordination with control owners and departments.
• Perform scheduled compliance checks using approved procedures, checklists, and control requirements.
• Document observations, audit findings, and potential control gaps; escalate to Senior Team Lead.
• Track corrective actions and follow up with owners for timely closure.
• Maintain complete, accurate records of compliance activities, requests, assessments, and evidence.
• Prepare status reports and materials for audits, reviews, and meetings.
• Protect confidential information per company policies.
• Assist in drafting, reviewing, formatting, publishing, and updating compliance policies and procedures.
• Coordinate reviews/approvals with document owners and maintain acknowledgements.
• Support policy communication and employee awareness.
• Review customer and internal requests for completeness against policies; process within authority and maintain audit trail.
• Refer incomplete or high-risk requests for decision.
• Support risk assessment for new-client onboarding with relevant departments.
• Identify risks and document impact analysis with risk criteria.
• Maintain risk treatment decisions and timelines in risk registries.
• Monitor risk treatment action plans and escalate gaps.
• Support Integrated Management System implementation and continual improvement.
• Track objectives, targets, and programs; prepare progress updates.
• Maintain IMS records and ensure audit readiness.
• Coordinate with stakeholders to obtain information and evidence.

Skills

Compliance basics

Audit support

Risk management

Information security awareness

Documentation & recordkeeping

Communication skills

Education

Bachelor’s degree in IT/Engineering/Business

Tools

Microsoft Office

Document management systems

Ticketing systems

Job description

The Compliance Implementation Associate supports the day-to-day execution of compliance, audit, risk governance, regulatory documentation, and Integrated Management System activities. The role helps maintain audit readiness and supports the implementation of controls aligned with ISO 27001, PCI DSS 4.0, HIPAA/HITRUST and SOC 2 Type II.

Working under the guidance of the Compliance Implementation Senior Team Lead, the Associate coordinates with process owners and cross-functional stakeholders, maintains accurate evidence and records, tracks compliance and risk actions, and escalates gaps or delays. The role contributes to consistent compliance execution and continuous improvement of the organization’s risk and compliance posture.

Responsibilities:

Compliance Monitoring and Audit Support

• Support internal and external compliance audits covering ISO 27001, ISO 22301, PCI DSS 4.0, SOC 2 Type II, and applicable internal requirements.
• Collect, organize, validate, and maintain audit evidence in coordination with control owners and relevant departments.
• Perform scheduled compliance checks using approved procedures, checklists, and control requirements.
• Document observations, audit findings, and potential control gaps accurately and escalates them to the Senior Team Lead.
• Track corrective actions and follow up with assigned owners to support timely closure.

Compliance Records and Documentation

• Maintain complete, accurate, and current records of compliance activities, requests, assessments, and supporting evidence.
• Apply document control requirements, including approved naming conventions, version control, retention, and access restrictions.
• Prepare status reports, trackers, and supporting materials for audits, management reviews, and compliance meetings.
• Protect confidential and sensitive information in accordance with company policies and applicable requirements.

Policy and Procedure Support

• Assist in drafting, reviewing, formatting, publishing, and updating compliance policies, procedures, and related guidance.
• Coordinate reviews and approvals with document owners and maintain records of required acknowledgements.
• Support policy communication, awareness activities, and monitoring of employee adoption.

Compliance Request Processing

• Review customer and internal requests for completeness against established policies, procedures, and compliance criteria.
• Process requests within assigned authority and service-level targets while maintaining an accurate audit trail.
• Refer incomplete, non-compliant, unusual, or high‑risk requests to the Senior Team Lead or appropriate risk owner for decision.

Risk Governance Support

• Support risk assessment activities for new-client onboarding in coordination with Client Services and relevant departments.
• Assist risk owners in identifying operational, information security, compliance, and client‑specific risks.
• Gather information needed to assess impact and likelihood using approved risk criteria and the organization’s risk appetite.
• Document risk treatment decisions, action owners, timelines, and success criteria in the appropriate risk register or tracker.
• Monitor risk treatment action plans, follow up on overdue items, and escalates gaps or delays.
• Maintain evidence of implemented controls and support reviews of control effectiveness.

Integrated Management System Support

• Support the implementation, maintenance, monitoring, and continual improvement of the Integrated Management System.
• Coordinate information and action items with stakeholders for SWOT analysis, stakeholder analysis, risk assessments, and management reviews.
• Assist with business impact analysis activities that support business continuity and operational resilience.
• Track objectives, targets, and programs and help prepare progress updates for the Compliance team.
• Maintain IMS records and supporting documentation in a state of audit readiness.

Stakeholder Coordination and Continuous Improvement

• Coordinate with departments and control owners to obtain required information, evidence, approvals, and action updates.
• Respond to routine compliance questions within established guidance and refer matters requiring interpretation or approval.
• Identify recurring documentation or process issues and recommend practical improvements to the Senior Team Lead.
• Participate in compliance training, awareness sessions, team meetings, and improvement initiatives.

Qualification Requirements:

Education:

• Bachelor’s degree in Industrial Engineering, Computer Engineering, Information Technology, Business Administration, Accounting, or a related field; equivalent relevant experience may be considered.

Experience:

• One to two years of experience in compliance, internal audit, information security, risk management, quality management, document control, or a related function is preferred.
• Exposure to audit preparation, evidence collection, policy administration, risk registers, or corrective‑action tracking is preferred.
• Familiarity with one or more of the following is an advantage: ISO 27001, PCI DSS 4.0, SOC 2 Type II, HIPAA/HITRUST or an Integrated Management System.
• Relevant internship experience may be considered for candidates with strong analytical, documentation, and coordination skills.

Knowledge and Skills:

• Basic understanding of compliance, audit, risk management, information security, or quality management principles.
• Strong attention to detail and the ability to maintain accurate, well‑organized records and evidence.
• Effective written and verbal communication skills, including the ability to follow up professionally with stakeholders.
• Analytical and problem‑solving skills, with the judgement to recognize and escal*? ?
• Ability to manage multiple tasks, meet deadlines, and work effectively with limited supervision after receiving guidance.
• Proficiency in Microsoft Office or comparable productivity tools; experience with document repositories, ticketing systems, or governance, risk, and compliance tools is an advantage.
• Commitment to confidentiality, integrity, accountability, and continuous learning.