Compliance, Risk and Controls Lead

Scrubbed; San Fernando; Hybrid; PHP 1,000,000 - 1,500,000; Full time

Job summary

Functional Support Group is seeking a Compliance & Risk Lead to oversee compliance, risk management, governance, and internal controls for US and Philippine operations. The role analyzes exposures, coordinates mitigations, and elevates matters needing legal or executive attention.

The ideal candidate will work with Legal, Finance, HR, IT, and Operations, and report to the Director of Compliance/Risk or CFO. Strong analytical skills are essential.

Qualifications

• Bachelor’s degree or related field required.
• 5–8 years in compliance, risk management, or internal controls.
• Experience with contract review and governance processes.
• Understanding of US and Philippine regulatory needs is a plus.
• Certifications like CPA, CIA, CISA or CRISC are advantageous.

Responsibilities

• Manage contracts compliance and corporate governance obligations.
• Maintain trackers for contracts, compliance, and governance.
• Review contracts and third-party arrangements for risk.
• Coordinate with Legal, Finance, HR, IT, Operations to assign obligations.
• Monitor insurance, data protection, security, and audit rights.
• Support governance activities and policy reviews.
• Monitor laws and regulations for impact and remediation actions.
• Escalate material issues to Director/CFO and Legal.
• Support ERM framework development and risk assessments.
• Maintain enterprise risk registers and KRIs.
• Identify risk owners and oversee remediation plans.

Skills

Regulatory compliance

Risk management

Contract compliance

Internal controls

ERM framework

Stakeholder management

Education

Bachelor’s degree in Accounting or related field

5–8 years in compliance/risk/internal audit

Tools

SOC examinations

SOX compliance

Job description

Day Shift - Hybrid

Functional Support Group, 1 Open position

The Compliance & Risk Lead is responsible for managing and overseeing the company’s compliance, risk management, governance, and internal control activities. The role focuses on ensuring compliance with contractual, legal, regulatory, governance, and internal policy requirements across the company’s U.S. and Philippine operations.

The role requires practical knowledge of legal and contractual terms, U.S. and Philippine compliance requirements, risk management, and internal controls. The Lead will identify potential compliance and risk exposures, assess their business impact, coordinate appropriate mitigation, and elevate matters requiring legal or executive attention.

The Compliance & Risk Lead will work closely with Legal, Finance, Operations, HR, IT, and other business functions and will provide management with clear visibility into compliance obligations, key risks, control gaps, and remediation activities. The position reports to the Director of Compliance/Risk or CFO, as applicable, and leads compliance and risk personnel.

Responsibilities

Contracts Compliance & Corporate Governance

Manage and monitor contractual, legal, regulatory, and corporate governance obligations.

Maintain centralized contract, compliance, and governance trackers, including key deadlines, approvals, certifications, and reporting requirements.

Review contracts, amendments, renewals, and third-party arrangements from a compliance and risk perspective, in coordination with and subject to guidance from Legal Counsel.

Coordinate with Legal, Finance, HR, IT, Operations, and other stakeholders to ensure obligations are properly assigned, implemented, and documented.

Monitor compliance with insurance, data protection, security, audit rights, subcontracting,service levels, and other material requirements.

Support corporate governance activities, policy reviews, management approvals, and compliance reporting.

Monitor relevant changes in laws, regulations, standards, and contractual requirements and assess their impact on the company.

Escalate material compliance, contractual, and governance matters to the Director/CFO and Legal.

Enterprise Risk Management

Support the development and maintenance of the company’s Enterprise Risk Management (ERM) framework.

Coordinate periodic enterprise and functional risk assessments covering strategic, operational, financial, compliance, technology, information security, and third-party risks.

Maintain the enterprise risk register and facilitate risk assessments with business and functional leaders.

Assess risks based on likelihood, impact, existing controls, and residual exposure.

Facilitate the assignment of risk owners and monitor risk mitigation plans and Key Risk Indicators (KRIs).

Identify and elevate significant or emerging risks to management.

Periodically reassess risks and evaluate whether existing mitigation strategies and controls remain effective and appropriate.

Internal Controls & Control Monitoring

Support the development, maintenance, and continuous improvement of the company's internal control framework and maintain a centralized control inventory and issue tracker.

Identify key risks and controls across Finance, Operations, HR, IT, Information Security, and other functions.

Assess control design and perform periodic control reviews, compliance checks, and control testing.

Evaluate key controls including management reviews, access, approvals, reconciliations, segregation of duties, contract compliance, and third-party controls.

Review control evidence and identify control deficiencies, process gaps, and exceptions.

Document findings and provide practical recommendations for remediation.

Monitor remediation plans through closure and validate implementation of corrective actions.

Support internal audits, external audits, SOC examinations, SOX activities, and other compliance reviews as applicable.

Qualifications

Bachelor’s degree in Accounting, Finance, Business Administration, Risk Management, Internal Audit, Legal Management, or a related field.

5–8 years of relevant experience in compliance, risk management, internal audit, internal controls, corporate governance, or contract compliance.

Experience in contract review, compliance monitoring, risk assessment, and internal control evaluation.

Strong understanding of corporate governance, regulatory compliance, contractual obligations, and risk management principles.

Knowledge of US and Philippine legal, regulatory, and business requirements is an advantage.

Experience working with client, vendor, partner, and subcontractor agreements, including identifying and monitoring key contractual obligations.

Familiarity with ERM frameworks, risk registers, control frameworks, and remediation processes.

Experience supporting or coordinating internal audits, external audits, SOC examinations, or other compliance reviews is preferred.

Strong analytical and problem-solving skills, with the ability to identify risks, control gaps, and compliance issues and recommend practical solutions.

Strong documentation and reporting skills, with attention to detail and the ability to maintain accurate compliance, risk, and control records.

Ability to work effectively with Legal, Finance, HR, IT, Operations, and senior management.

Strong communication and stakeholder management skills, including the ability to elevate significant risks and compliance matters appropriately.

Highly organized, proactive, and capable of managing multiple compliance, risk, and control activities simultaneously.

Professional certification such as CPA, CIA, CISA, CRISC, or other relevant compliance/risk certifications is an advantage.