Compliance Implementation Specialist

iQor; Cebu City; On-site; PHP 335,000 - 536,000; Full time

Job summary

iQor in Cebu City seeks a Compliance Implementation Associate to support day-to-day compliance, audits, risk governance, and Integrated Management System activities.

You will coordinate with process owners, maintain evidence, track actions, and assist with policy creation and documentation to keep audit readiness in a regulated environment.

This role offers growth in ISO 27001, PCI DSS 4.0, HIPAA/HITRUST and SOC 2 Type II compliance within a global organization.

Qualifications

• 1–2 years of experience in compliance or related function.
• Exposure to audit preparation and evidence collection.
• Familiarity with ISO 27001, PCI DSS 4.0, SOC 2 Type II or similar.
• Experience with document control and records management.

Responsibilities

• Support audits covering ISO 27001, ISO 22301, PCI DSS 4.0, SOC 2 Type II.
• Collect, organize, validate, and maintain audit evidence.
• Document observations and audit findings; elevate gaps to leadership.
• Track corrective actions and ensure timely closure.
• Assist policy drafting, reviews, and publishing of procedures.
• Review requests for completeness against policies.
• Support risk assessments for new-client onboarding.
• Maintain IMS records and support audit readiness.

Skills

Attention to detail

Communication

Analytical

Documentation

MS Office

Education

Bachelor’s degree in Industrial Engineering, Computer Engineering, IT, Business Admin, or related field

Tools

GRC tools

Document repositories

Ticketing systems

Audit software

Job description

iQor in Cebu City seeks a Compliance Implementation Associate to support day-to-day compliance, audits, risk governance, and Integrated Management System activities.

You will coordinate with process owners, maintain evidence, track actions, and assist with policy creation and documentation to keep audit readiness in a regulated environment.

This role offers growth in ISO 27001, PCI DSS 4.0, HIPAA/HITRUST and SOC 2 Type II compliance within a global organization.