IT Compliance Analyst

Satellite Office; Pasig; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

Satellite Office is seeking an experienced IT Audit and Compliance Specialist to oversee internal and external IT audit activities and PCI compliance processes. You will design audit plans, coordinate findings, and ensure documentation and controls remain aligned with regulatory expectations.

You will collaborate with stakeholders across the organization, drive remediation actions, and help mature governance, risk, and compliance programs in a fast-paced environment.

Qualifications

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive governance, risk, compliance or internal audit experience.
• Proven experience designing, executing and closing internal audit activities.
• Excellent communication skills, written and verbal with strong analytical abilities.
• Time management skills under reporting deadlines.
• Stakeholder engagement skills.

Responsibilities

• Oversee the internal IT audit plan and coordination across the organization.
• Serve as liaison for internal/external audit activity and tracking.
• Maintain a central register of controls and monitor management actions.
• Improve documentation of internal audit processes and controls.
• Oversee PCI compliance processes, documentation, and attestation.
• Collaborate with stakeholders to drive remediation and governance improvements.

Skills

Collaborative

Decision maker

Problem solver

Excellent communicator

Stakeholder management

Analytical thinking

Proactive mindset

Creative thinking

Education

Tertiary qualification in risk/compliance/internal audit

Certification in risk/compliance/internal audit

Job description

Position Purpose

To oversee the internal and external IT compliance and audit processes and frameworks

Role Accountabilities

Accountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group’s PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.
• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.

Essential Qualities

• Collaborative
• Decision maker
• Problem solver
• Excellent communicator
• Efficient and effective
• Innovative and creative
• Analytical
• Proactive
• Exceptional stakeholder management skills, able to build relationships, influence and engage.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• A positive, curious and flexible attitude.

Qualification & Experience Requirements

What is the typical background required to competently perform the responsibilities of the job?

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• Time management skills under reporting deadlines
• Stakeholder engagement skillsData analyst skills