IT Governance, Risk & Compliance (GRC) Analyst

Satellite Office; Taguig; On-site; PHP 420,000 - 660,000; Full time

Job summary

Satellite Office is seeking an IT Compliance Analyst to oversee internal and external IT compliance and audit processes. You will design and deliver an IT audit plan, coordinate audit activities, and oversee PCI compliance with documentation, testing, and attestation.

You will align IT standards with customer expectations and develop robust reporting mechanisms. You will work with internal teams to ensure timely delivery of audit actions, maintain control registers, and onboard new brands to PCI

Qualifications

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.

Responsibilities

• Oversee External/Internal Audit requirements and deliver a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.
• Oversee IT Compliance activities and align policies with customer expectations.
• Develop reporting methodologies and reporting mechanisms to end customers.
• Run weekly, monthly, quarterly reporting and audit check cycles.
• Assist with ongoing PCI compliance processes and attestation.
• Manage PCI data loss prevention filters and advise on PCI initiatives.
• Onboard new brands and regions to PCI processes.
• Assist with tabletop exercises to ensure PCI processes during incidents.

Skills

Collaborative

Analytical

Excellent communicator

Stakeholder mgmt

Problem solver

Proactive

Decision maker

Education

Tertiary qualification in risk/compliance

Internal audit certification

Job description

Work for our global clients and immerse in our rich and diverse company culture where you can thrive, grow and just be aweSOme!

WHAT IS AN IT COMPLIANCE ANALYST?

To oversee the internal and external IT compliance and audit processes and frameworks

WHAT WILL BE YOUR MAIN RESPONSIBILITIES?

Accountability: Oversee External/Internal Audit requirements

• Design and facilitate the delivery of a robust internal IT audit plan.
• Serve as key liaison for all internal/external audit activity across the organisation.
• Coordinate oversight, tracking and delivery of management actions resulting from internal/external audit activity.
• Maintain a central register of controls (key and non-key) that technology manages in support of our risk management and regulatory obligations.
• Improve documentation of the internal processes related to audit.

Accountability: Oversee IT Compliance Activities

• Examining all existing policies and procedures; developing and improving where necessary
• Aligning Internal IT standards and processes with customer expectations
• Developing reporting methodologies and reporting mechanisms to end customers.
• Running the weekly, Monthly, Quarterly reporting and audit check cycles.

Accountability: Assist with ongoing PCI compliance processes

• Manage and improve the Group’s PCI compliance processes, including documentation, monthly auditing tasks, non-technical testing and tool management, communication, data flow diagrams, risk-related questions, and annual PCI compliance attestation.
• Consult with external PCI consultant(s) regarding questions related to standards and best practices.
• Day-to-day management of PCI data loss prevention filters to prevent prohibited card-related data from being sent using our networks (non-technical).
• Foster adherence to newly introduced PCI-DSS requirements & communicate with the wider group regarding new PCI initiatives.
• Onboard various parts of our business, as well as newly acquired brands and regions, to our centrally managed PCI processes.
• Assist with tabletop exercises that help to ensure our PCI processes are followed when experiencing potential information security incidents.

Essential Qualities

• Collaborative
• Decision maker
• Problem solver
• Excellent communicator
• Efficient and effective
• Innovative and creative
• Analytical
• Proactive
• Exceptional stakeholder management skills, able to build relationships, influence and engage.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• A positive, curious and flexible attitude.

WHAT ARE WE LOOKING FOR?

• Tertiary qualification or relevant specialist certification in risk, compliance or internal audit.
• Extensive experience in governance, risk, compliance, or internal audit management.
• Demonstrated experience in designing, executing and closing out internal audit activities.
• Excellent communication skills, written and verbal coupled with highly developed analytical skills.
• Time management skills under reporting deadlines
• Stakeholder engagement skills
• Data analyst skills