Compliance, Risk and Controls Lead

Scrubbed; San Fernando; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Scrubbed is seeking a Compliance & Risk Lead to oversee compliance, risk management, governance and internal controls across US and Philippine operations. The role involves identifying exposures, coordinating mitigation, and elevating matters requiring legal or executive attention.

You will work with Legal, Finance, Operations, HR and IT, maintain trackers, support audits, and lead a team of compliance and risk professionals.

Qualifications

• Bachelor’s degree required in a related field with 5–8 years in compliance or risk.
• Experience with contract compliance and governance activities.
• Knowledge of US and Philippine regulatory requirements.
• Ability to coordinate across Legal, Finance, IT, HR, and Ops.

Responsibilities

• Manage contracts compliance, governance obligations, and trackers.
• Review contracts and amendments for compliance risk.
• Coordinate withLegal, Finance, HR, IT, and Ops to assign obligations.
• Maintain risk registers and support ERM framework.
• Escalate material risks to leadership and CFO.
• Support audits and SOC/SOX examinations.

Skills

Analytical thinking

Risk assessment

Compliance monitoring

Contract governance

Stakeholder management

Regulatory knowledge

Education

Bachelor’s degree in Accounting, Finance, Business Administration, Risk Management, Internal Audit, Legal Management

Tools

ERM frameworks

SOX/SOC knowledge

Contract review tooling

Job description

The Compliance & Risk Lead is responsible for managing and overseeing the company’s compliance, risk management, governance, and internal control activities. The role focuses on ensuring compliance with contractual, legal, regulatory, governance, and internal policy requirements across the company’s U.S. and Philippine operations.

The role requires practical knowledge of legal and contractual terms, U.S. and Philippine compliance requirements, risk management, and internal controls. The Lead will identify potential compliance and risk exposures, assess their business impact, coordinate appropriate mitigation, and elevate matters requiring legal or executive attention.

The Compliance & Risk Lead will work closely with Legal, Finance, Operations, HR, IT, and other business functions and will provide management with clear visibility into compliance obligations, key risks, control gaps, and remediation activities. The position reports to the Director of Compliance/Risk or CFO, as applicable, and leads compliance and risk personnel.

Responsibilities

Contracts Compliance & Corporate Governance

• Manage and monitor contractual, legal, regulatory, and corporate governance obligations.
• Maintain centralized contract, compliance, and governance trackers, including key deadlines, approvals, certifications, and reporting requirements.
• Review contracts, amendments, renewals, and third-party arrangements from a compliance and risk perspective, in coordination with and subject to guidance from Legal Counsel.
• Coordinate with Legal, Finance, HR, IT, Operations, and other stakeholders to ensure obligations are properly assigned, implemented, and documented.
• Monitor compliance with insurance, data protection, security, audit rights, subcontracting, service levels, and other material requirements.
• Support corporate governance activities, policy reviews, management approvals, and compliance reporting.
• Monitor relevant changes in laws, regulations, standards, and contractual requirements and assess their impact on the company.
• Escalate material compliance, contractual, and governance matters to the Director/CFO and Legal.

Enterprise Risk Management

• Support the development and maintenance of the company’s Enterprise Risk Management (ERM) framework.
• Coordinate periodic enterprise and functional risk assessments covering strategic, operational, financial, compliance, technology, information security, and third-party risks.
• Maintain the enterprise risk register and facilitate risk assessments with business and functional leaders.
• Assess risks based on likelihood, impact, existing controls, and residual exposure.
• Facilitate the assignment of risk owners and monitor risk mitigation plans and Key Risk Indicators (KRIs).
• Identify and elevate significant or emerging risks to management.
• Periodically reassess risks and evaluate whether existing mitigation strategies and controls remain effective and appropriate.

Internal Controls & Control Monitoring

• Support the development, maintenance, and continuous improvement of the company’s internal control framework and maintain a centralized control inventory and issue tracker.
• Identify key risks and controls across Finance, Operations, HR, IT, Information Security, and other functions.
• Assess control design and perform periodic control reviews, compliance checks, and control testing.
• Evaluate key controls including management reviews, access, approvals, reconciliations, segregation of duties, contract compliance, and third-party controls.
• Review control evidence and identify control deficiencies, process gaps, and exceptions.
• Document findings and provide practical recommendations for remediation.
• Monitor remediation plans through closure and validate implementation of corrective actions.
• Support internal audits, external audits, SOC examinations, SOX activities, and other compliance reviews as applicable.

Qualifications

• Bachelor’s degree in Accounting, Finance, Business Administration, Risk Management, Internal Audit, Legal Management, or a related field.
• 5–8 years of relevant experience in compliance, risk management, internal audit, internal controls, corporate governance, or contract compliance.
• Experience in contract review, compliance monitoring, risk assessment, and internal control evaluation.
• Strong understanding of corporate governance, regulatory compliance, contractual obligations, and risk management principles.
• Knowledge of US and Philippine legal, regulatory, and business requirements is an advantage.
• Experience working with client, vendor, partner, and subcontractor agreements, including identifying and monitoring key contractual obligations.
• Familiarity with ERM frameworks, risk registers, control frameworks, and remediation processes.
• Experience supporting or coordinating internal audits, external audits, SOC examinations, or other compliance reviews is preferred.
• Strong analytical and problem-solving skills, with the ability to identify risks, control gaps, and compliance issues and recommend practical solutions.
• Strong documentation and reporting skills, with attention to detail and ability to maintain accurate compliance, risk, and control records.
• Ability to work effectively with Legal, Finance, HR, IT, Operations, and senior management.
• Strong communication and stakeholder management skills, including the ability to elevate significant risks and compliance matters appropriately.
• Highly organized, proactive, and capable of managing multiple compliance, risk, and control activities simultaneously.
• Professional certification such as CPA, CIA, CISA, CRISC, or other relevant compliance/risk certifications is an advantage.