Manager - IT Risk & PCI Compliance | Hybrid | Night Shift

AVENSYS CONSULTING INC.; Quezon City; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

AVENSYS CONSULTING INC. is seeking a senior professional to lead PCI Compliance and IT Risk Management efforts across the organization in Manila.

The role focuses on developing and enforcing compliance programs, conducting risk assessments, and guiding governance practices to protect payment data and ensure regulatory alignment. The ideal candidate has 4-6 years of relevant experience, strong communication skills, and a proven track record in managing teams and processes within controlled

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, Risk Management or related field.
• 4-6 years of experience in PCI Compliance and IT Risk Management.
• Strong attention to detail and organizational skills.
• Strong written and verbal communication and collaboration abilities.
• 2 years of experience managing and developing resources.
• Ability to follow established processes and procedures.

Responsibilities

• Leads daily activities of PCI Compliance and IT Risk Management team.
• Monitors regulatory requirements, industry trends, and threats; escalates issues.
• Supports technology and cybersecurity risk assessments and reporting.
• Ensures compliance with payment networks and regulatory requirements (e.g., Visa, MasterCard, AMEX).
• Partners with stakeholders to align compliance, risk, and business objectives.

Skills

PCI Compliance

IT Risk Management

Regulatory compliance

Audit and governance

Communication skills

Education

Bachelor's degree in Information Security / Cybersecurity / IT / Risk Management

Job description

About the role

Manages the development, implementation, and enforcement of the compliance program as well as planning, directing, and administering risk management and loss prevention programs related to operating risk, insurance, and any class of financial risk. This may include establishing risk tolerance guidelines and policies and ensuring the risk exposure of the organization is within these guidelines. Ensures maximum protection of the organization's assets. Develops and implements business continuity plans enterprise-wide, where applicable. Conducts periodic audits to assess compliance levels. Develops processes for effective and efficient reporting and data analysis to minimize risk exposure. Consults on an ongoing basis on related issues with managers and executives. Ensures conformance with applicable laws and regulations and ensures regular training is conducted on compliance issues.

Key responsibilities

• Leads and oversees the daily activities and performance of PCI Compliance and IT Risk Management team members, providing guidance, prioritization, and training support.

• Acts as a PCI Compliance and IT Risk SME by monitoring regulatory requirements, industry trends, and emerging threats, assessing risks, and escalating key issues to management.

• Supports and conducts technology and cybersecurity risk assessments, including control reviews, risk analysis, stakeholder engagement, reporting, and recommendations for improvement.

• Ensures compliance with payment network and regulatory requirements (e.g., Visa, MasterCard, AMEX, Discover) while advising on compliant business and technology solutions.

• Partners with technical and business stakeholders to manage compliance initiatives, document requirements, and help ensure technical solutions align with compliance, risk, and business objectives.

About you

• Bachelor's degree in Information Security, Cybersecurity, IT, Risk Management, or related field (or equivalent experience)

• 4-6 years of experience in PCI Compliance and IT Risk Management, with a background in information security, risk assessment, regulatory compliance, audit, and governance practices.

• Strong attention to detail and organizational skills; strong multi-tasking skills

• Strong written and verbal communication skills; strong presentation, networking and collaboration skills

• 2 years of previous experience managing and developing resources

• Ability to follow established processes and procedures

• Demonstrates strong execution discipline and follows structured processes in controlled environments.

• Applies risk awareness and compliance knowledge to protect sensitive payment data and support business objectives.

• Collaborates effectively with cross-functional and global teams to achieve shared goals.

• Takes ownership of tasks, exercises sound judgment, and resolves issues using established policies and procedures.