IT Auditor/Technology Risk Consultant

HRTX; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

HRTX is seeking an IT Auditor/Technology Risk Consultant to assess, implement, and maintain privacy-enhancing technologies and compliance solutions. You will collaborate with legal, IT, security, and data governance to ensure privacy controls are embedded in processes and systems.

The role involves recertification, access tracking, evidence gathering, and coordinating with engineering teams to integrate privacy requirements. Strong communication and independent work ethic are essential.

Qualifications

• 4+ years of experience in Information Technology or related field.
• Knowledge of regulatory requirements and compliance (SOX/PCI/HIPAA/PII).
• Privacy certifications are a plus.
• Experience in identity and access management is a plus.
• Strong analytical and communication skills.

Responsibilities

• Ensure privacy controls are integrated into business processes and technology systems.
• Complete user access recertification in compliance with SOX/PCI/HIPAA/PII/ePHI.
• Perform application access tracking and maintenance.
• Collaborate with legal, IT, security, and data governance teams.
• Prepare documentation for data control activities as needed.
• Work with engineering, IT, and security to integrate privacy requirements.
• Monitor tools for data subject requests, cookies consent management, and preferences.
• Perform privacy impact assessments and data protection impact assessments.

Skills

Regulatory compliance knowledge

Privacy by design

Analytical and problem-solving

Communication and interpersonal skills

Independent work capability

Education

CIPP/US, CIPT, CIPM certifications (preferred)

Job description

About the job IT Auditor/Technology Risk Consultant

As a Privacy Analyst, Technology Analyst, you will play a key role in assessing, implementing, and maintaining privacy-enhancing technologies and compliance solutions. This position collaborates closely with legal, IT, security, and data governance teams to ensure privacy controls are integrated into business processes and technology systems. The analyst evaluates risks, supports privacy-by-design initiatives, and enhances automation for regulatory compliance.

• Timely completion and remediation of periodic user access
  recertification in compliance to regulatory requirements such asSOX/PCI/HIPAA/PII/ePHI/Restricted Data.
• Perform application access tracking, management, and maintenance.
• Perform case studies, request sampling, and evidence gathering.
• Collaborate with the management and various support groups for dataextraction and validation as required for audit and compliance.
• Prepare documentation, including processes and procedures inmanaging data control activities as needed to ensure that allrecertification and application tracking processes and procedures areadhered to and up to date.
• Work with engineering, IT, and security teams to integrate privacyrequirements into existing and new systems.
• Monitor and enhance tools for data subject requests fulfillment, cookiesconsent management, and preference centres.
• Perform privacy impact assessments and data protection impactassessments for new and existing technologies.

Qualifications:

• Must have at least 4 years of experience in the Information Technologyand/or other related industry.
• Knowledge of regulatory requirements and compliance
  (SOX/PCI/HIPAA/PII).
• Privacy certifications such as CIPP/US, CIPT, or CIPM are a plus
• Knowledge in several security and compliance domains, such as audit,recertification, data, and application security.
• Experience in identity and access management
  administration/operations is a plus.
• Should have strong analytical and problem-solving skills.Excellent communication, interpersonal, and consultative skills.
• Able to work independently with limited supervision.