Governance, Risk, and Compliance Lead

KMC Solutions; Taguig; Hybrid; PHP 1,500,000 - 2,300,000; Full time

Job summary

InHealth Philippines seeks a Governance, Risk and Compliance Lead to act as the central coordination hub for all governance, regulatory and licence compliance. The role spans across People/HR Services, Legal, Data, Finance and Operations to protect the company from compliance risk and missed filings.

The GRC Lead will maintain a master obligations register, ensure ownership and deadlines, escalate issues and coordinate with regulators and advisers to maintain robust compliance across the

Qualifications

• Demonstrable experience in Philippine corporate governance, regulatory compliance, legal operations, risk, audit or a cross-functional compliance role.
• Bachelor’s degree in a related discipline.
• Experience coordinating with regulators and external advisers.

Responsibilities

• Maintain a complete view of obligations across the business and ensure timely ownership and evidence.
• Coordinate end-to-end compliance timetable and submissions.
• Maintain a central repository of registrations, licences, permits and evidence.
• Coordinate BOI licence conditions and related annual evidence packs.
• Assist across People/HR Services, Legal, Data, Finance and Operations to manage compliance.

Skills

Regulatory compliance

Governance

Risk management

Cross-functional coordination

Stakeholder management

Documentation

Education

Bachelor’s degree in Law/Accounting/Finance/Business Administration/HR/Compliance/Risk Management

Job description

The Governance, Risk and Compliance Lead (GRC Lead) will be the central coordination hub for all governance, statutory, regulatory and licence compliance requirements relating to InHealth Philippines. The role will maintain a complete view of obligations across the business, ensure clear ownership and deadlines, and hold responsible teams to account for timely completion and appropriate evidence. This is an enterprise-wide Philippines role with the postholder working work across People / HR Services, Legal, Data, Finance and Operations, bringing together internal owners, external advisers and regulatory bodies to protect the company from missed filings, licence breaches, financial penalties and avoidable compliance risk.

Central governance and compliance hub

• Maintain the Philippines governance and compliance framework, master obligations register and annual compliance calendar covering corporate, tax, employment, social security, local government, data, legal, licensing and other statutory requirements
• Act as the coordination point for requirements involving the Bureau of Internal Revenue (BIR), Securities and Exchange Commission (SEC), Local Government Units (LGUs), Social Security System (SSS), PhilHealth, Pag-IBIG Fund, Board of Investments (BOI) and other authorities as applicable
• Identify each obligation’s accountable owner, supporting functions, due date, dependency, submission route and required evidence. Make ownership visible and follow through until closure
• Co‑ordinate periodic governance reviews with Directors and functional leaders, highlighting upcoming deadlines, overdue actions, control gaps and decisions required
• Maintain a controlled central repository of registrations, licences, permits, returns, certificates, acknowledgements, legal advice and supporting evidence.

Regulatory and statutory compliance coordination

• Coordinate the end‑to‑end compliance timetable ensuring responsible teams and advisers prepare, review, approve and submit requirements accurately and on time
• Monitor changes in Philippine regulatory and statutory requirements, assess which functions are affected and coordinate updates to controls, procedures and the obligations register
• Maintain effective relationships and correspondence logs for regulators, government bodies, external counsel, tax advisers, payroll providers and other specialist advisers
• Ensure new or amended business activities, locations, working arrangements, licences and registrations are assessed for compliance impact before implementation
• Escalate any actual or potential breach promptly, coordinate corrective actions and track regulatory responses, remediation and evidence to completion.

BOI licence and incentive governance

• Own the central coordination of BOI licence conditions, Specific Terms and Conditions and General Terms and Conditions, with Legal validating interpretation and each function delivering its assigned obligations
• Maintain the BOI compliance tracker including registration documents, start of commercial operations requirements, onsite working conditions, headcount and compensation commitments, project costs and assets, incentive controls, correspondence and annual evidence packs whilst liaising with key stakeholders for any required data inputs
• Ensure submissions and notifications are supported by retained evidence and regulator acknowledgements, and that any conditions without a confirmed deadline are actively clarified with the relevant adviser
• Coordinate a regular review of BOI conditions and readiness for any inspection, audit or evidence request.

Functional coordination and accountability

• People / HR Services: coordinate employment, payroll, labour, SSS, PhilHealth, Pag-IBIG, employee records, workplace and related compliance obligations
• Legal: coordinate corporate governance, SEC filings, Board and shareholder records, contracts, permits, licences, legal opinions and regulatory interpretation
• Data and Information Security: coordinate Philippine data privacy requirements, registrations, policies, incident governance, retention and evidence, working with the relevant specialists
• Finance: co‑ordinate BIR, tax, statutory accounting, audit, incentives, banking and financial evidence requirements while leaving technical ownership with the appropriate Finance or adviser lead
• Operations: co‑ordinate site, LGU, business permit, BOI operating condition, facilities and other operational compliance requirements
• Challenge owners constructively, secure recovery plans for slippage and escalation unresolved issues to the relevant functional leader
• The GRC Lead is accountable for the coordination, visibility challenge, escalation and evidence governance. Technical accountability for specialist advice, calculations, legal interpretation, formal approvals and submission remains with the relevant functional owner or appointed professional advisor. The role must nevertheless ensure that ownership is explicit, professional monitoring and gaps are escalated before they result in non‑compliance.

Controls, assurance and reporting

• Design and maintain proportionate governance controls, responsibility matrices, standard operating procedures, checklists and evidence standards
• Produce a concise monthly compliance dashboard showing critical upcoming deadlines, overdue items, evidence status, risks, incidents, regulatory correspondence and remediation actions
• Perform periodic completeness checks and targeted spot checks of high-risk obligations, without replacing the technical review responsibilities of Legal, Finance, HR, Data or external advisers
• Co‑ordinate internal and external audits, regulatory reviews and due diligence requests relating to Philippines governance and compliance
• Track findings and corrective actions to verified closure including root cause, accountable owner, target date and retained evidence
• Provide practical briefings and training so process owners understand their obligations, deadlines and evidence requirements.
  

Measures of success

• No avoidable penalties, licence lapses or late submissions caused by missed ownership, deadlines or escalation
• All material obligations have a named accountable owner, confirmed timetable and auditable evidence trail
• Critical and high-risk actions are escalated early and resolved within agreed recovery plans
• Leadership has a clear, current and reliable view of Philippines compliance status and emerging risks.

• Regulatory, licence and audit requests can be answered promptly from a complete central evidence repository.
  

What people see in you:

• A credible and proactive coordinator who is comfortable holding colleagues and advisers to account while maintaining constructive relationships
• Excellent organisation and attention to detail, with the ability to manage multiple recurring and event-driven deadlines
• Sound judgement on when to resolve an issue directly, seek specialist advice or escalating
• Clear written and verbal communication including reporting for senior leaders
• A practical continuous-improvement mindset and the discipline to maintain accurate trackers, records and evidence
• Integrity, discretion and confidence when handling sensitive legal, employee, tax, regulatory and data matters
• Ability to work effectively across a matrix organisation and across UK and Philippines stakeholders
• An ability to prioritise tasks whilst maintaining accuracy in a busy environment
• Able to build effective relationships with internal customers, colleagues and stakeholders
• Knowledge and understanding of the Data Protection Act and GDPR
• A team player who is positive, supportive, reliable and trustworthy
• Someone who is approachable, dedicated and hardworking
• Being proactive, escalation issues or opportunities
  

You will:

As part of InHealth, it is a privilege to work in a company that is so focused on making healthcare better, and we expect that anyone who works here will have a set of qualities that align with our corporate ethos, namely:

• Committed to making healthcare better for all
• Have very high standards
• Seeks to improve themselves and everything they do
• Be honest and open
• Works collaboratively and cooperatively with others
• Confident and assured, but not arrogant
• Measured in their judgements / decision-making
• Respectful of others’ views
• Be a self-starter, confident to undertake tasks independently and providing ongoing solutions to problems faced
• Be flexible in your working patterns to fulfil requirements and be willing to adjust these at short notice to accommodate unexpected changes
• Be honest and full to the brim with integrity
• Not be afraid to offer your opinion – we love hearing new ideas.

Job Qualiffications:

• Bachelor’s degree in Law, Accountancy, Finance, Business Administration, Human Resources, Compliance, Risk Management or a related discipline.
• Demonstrable experience in Philippine corporate governance, regulatory compliance, legal operations, risk, audit or a comparable cross-functional compliance role.
• Working knowledge of key Philippine regulatory and statutory bodies and the practical management of registrations, filings, permits and evidence.
• Experience maintaining compliance calendars, obligations registers, risk and action trackers, document repositories and management reporting.
• Experience in a multinational, shared services or Global Capability Centre environment is advantageous.
• A relevant professional qualification, such as CPA, lawyer, Certified Internal Auditor or recognised compliance/risk certification is advantageous but not essential where equivalent experience is demonstrated.

This is not a restrictive list of duties and all members of InHealth may be required to carry out additional tasks within their capability. All members of staff are required to participate in appraisals, self-development, mandatory and statutory training.