IT Compliance Analyst

Satellite Office; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Satellite Office seeks an IT compliance and audit lead to oversee internal and external IT audit activities, ensuring robust audit planning and alignment with regulatory obligations. You will coordinate actions, maintain control registers, and enhance documentation of internal processes.

Responsibilities include driving IT compliance, policy reviews, and developing reporting methods for clients, with regular audit cycles and stakeholder engagement at the core.

Qualifications

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Excellent communication skills, written and verbal.

Responsibilities

• Oversee external/internal IT audit requirements and deliver robust audit plans.
• Coordinate management actions resulting from audit activity.
• Maintain central register of IT controls to support risk management and regulatory obligations.
• Improve documentation of internal audit processes.
• Oversee IT compliance activities including policy review and alignment with customer expectations.
• Develop reporting methodologies and end-customer reporting mechanisms.

Skills

Stakeholder engagement

Data analysis

Time management

Excellent communication

Education

Risk/compliance/internal audit qualification

Tools

PCI compliance tools

Job description

Position Purpose

To oversee the internal and external IT compliance and audit processes and frameworks

Role Accountabilities

Accountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group's PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.
• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.

Essential Qualities

• Collaborative
• Decision maker
• Problem solver
• Excellent communicator
• Efficient and effective
• Innovative and creative
• Analytical
• Proactive
• Exceptional stakeholder management skills, able to build relationships, influence and engage.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• A positive, curious and flexible attitude.

Qualification & Experience Requirements

What is the typical background required to competently perform the responsibilities of the job?

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• Time management skills under reporting deadlines
• Stakeholder engagement skills
• Data analyst skills