Compliance Manager

Private Advertiser; Pasig; On-site; PHP 900,000 - 1,700,000; Full time

Job summary

Private Advertiser in Pasig, Metro Manila, seeks a Compliance Manager to ensure the company meets BSP, AMLC, DPA, PCI DSS, NTC and related governance requirements. You will collaborate with Legal and Compliance to align processes, reporting obligations, and governance standards with Group Risk.

The role also covers risk oversight across fintech and payments, analyzing current processes, researching trends, and documenting assessments for senior leadership.

Qualifications

• Bachelor’s degree in business, finance, IT or related field.
• 3–5 years in a compliance role with BSP/AMLC/DPA/PCI DSS exposure.
• Experience in fintech or payments and risk management.
• Ability to review NDAs, contracts and other documents for regulatory alignment.
• Experience delivering AMLA training and structured compliance training.
• Strong organizational skills to document test processes for audits.
• Understanding of security principles (firewalls, SIEM, EDR, patching, vulnerability mgmt).
• Knowledge of PCI DSS, ISO 27001, NIST CSF, NIST 800-53, CSA CCM, ISO 27017/22301.

Responsibilities

• Regulatory compliance: ensure timely submissions and governance across BSP, AMLC, DPA, PCI DSS, NTC, and others.
• Regulatory updates: keep the company informed on evolving requirements in fintech/payments.
• Internal audit: conduct audits to verify adherence to compliance standards.
• Document reviews: provide compliance input on NDAs, agreements, contracts, and documents.
• Risk frameworks: establish and maintain security and IT risk policies.
• Risk register management: maintain a comprehensive risk register across tech, operations, finance, and compliance.
• Employee adherence: ensure staff follow procedures and risk management protocols.
• Risk collaboration: work with teams to manage risks across technology, payments, merchants, and data.
• AML training: conduct refresher AMLA training and onboarding training for new hires.

Skills

Regulatory knowledge

Communication skills

Organizational skills

Training/advisory skills

Risk awareness

Education

Bachelor’s degree in Business Administration/Finance/IT or related field

Tools

PCI DSS

ISO 27001:2013

NIST CSF

DPA/Regulatory Frameworks

Job description

The Compliance Manager holds primary responsibility for ensuring the Company’s efficient and effective compliance with regulatory requirements set by the Bangko Sentral ng Pilipinas (BSP), Anti-Money Laundering Council (AMLC), Data Privacy Act (DPA), National Telecommunications Commission (NTC), and other governing bodies. The role collaborates closely with Legal and Compliance functions to align processes, reporting obligations, and governance standards with Group Risk.

Beyond regulatory compliance, the position also encompasses oversight of risk management across the broader fintech and payments industry. This includes analyzing current (as-is) processes and policies, researching emerging trends and technologies, and documenting assessments for review by senior leadership. The Compliance Manager is further tasked with producing clear, non-technical reports tailored for C-level executives and board members, ensuring that complex regulatory and risk issues are communicated in a concise and actionable manner.

DUTIES AND RESPONSIBILITIES

• Regulatory Compliance - Ensure timely submissions and implement governance policies, processes, and procedures in compliance with BSP, AMLC, DPA, PCI DSS, NTC, and other relevant governing bodies.
• Regulatory Updates - Continuously update the company on evolving requirements and compliance obligations across the fintech and payments industry.
• Internal Audit - Conduct internal audits of company processes, communications, and reporting to verify adherence to compliance standards.
• Document Reviews - Review, evaluate, and provide compliance input on NDAs, agreements, contracts, and other legal or operational documents to ensure alignment with regulatory and risk frameworks.
• Risk Frameworks - Establish and maintain security, disaster recovery, IT risk, and broader fintech risk policies and frameworks.
• Risk Register Management - Oversee the risk management process, including maintaining a comprehensive Risk Register that covers technology, operational, financial, and compliance risks.
• Employee Adherence - Ensure employees comply with all established procedures, frameworks, and risk management protocols.
• Risk Collaboration - Collaborate with teams to classify and manage risks across technology resources, payment systems, merchant operations, and customer data.
• AML Training: Conduct regular refresher training on AMLA requirements for existing employees and deliver structured compliance training for new hires to strengthen awareness and adherence to anti-money laundering standards.

JOB QUALIFICATION

• Bachelor’s degree in Business Administration, Financial Management, Accountancy, Economics, Management, Marketing, Legal Management, Political Science, or Information
• Technology/Computer Science (with specialization or exposure to compliance, risk, or regulatory frameworks).
• 3–5 years of experience in a compliance role involving BSP, AMLC, DPA, PCI DSS, and other governing bodies relevant to the payments industry.
• Prior work experience in a fintech or payment company, with exposure to operational, financial, and technology risk management.
• Demonstrated ability to review, evaluate, and provide compliance input on NDAs, agreements, contracts, and other legal or operational documents.
• Experience in conducting AMLA refresher training for existing employees and delivering structured compliance training for new hires.
• Strong organizational skills with the ability to design and document test processes to support compliance analysis and audits.
• Understanding of basic security principles including firewalls, SIEM, EDR, patching, and vulnerability management.
• Knowledge of industry standards and frameworks such as PCI DSS, ISO 27001:2013, NIST CSF, NIST 800-53, CSA CCM, ISO 27017, and ISO 22301.
• Excellent communication skills, with the ability to prepare non-technical reports and present compliance and risk issues effectively to C-level executives and board members.