Privacy & Risk IT Auditor | Compliance & IAM Specialist

HRTX; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

HRTX is seeking an IT Auditor/Technology Risk Consultant to assess, implement, and maintain privacy-enhancing technologies and compliance solutions. You will collaborate with legal, IT, security, and data governance to ensure privacy controls are embedded in processes and systems.

The role involves recertification, access tracking, evidence gathering, and coordinating with engineering teams to integrate privacy requirements. Strong communication and independent work ethic are essential.

Qualifications

• 4+ years of experience in Information Technology or related field.
• Knowledge of regulatory requirements and compliance (SOX/PCI/HIPAA/PII).
• Privacy certifications are a plus.
• Experience in identity and access management is a plus.
• Strong analytical and communication skills.

Responsibilities

• Ensure privacy controls are integrated into business processes and technology systems.
• Complete user access recertification in compliance with SOX/PCI/HIPAA/PII/ePHI.
• Perform application access tracking and maintenance.
• Collaborate with legal, IT, security, and data governance teams.
• Prepare documentation for data control activities as needed.
• Work with engineering, IT, and security to integrate privacy requirements.
• Monitor tools for data subject requests, cookies consent management, and preferences.
• Perform privacy impact assessments and data protection impact assessments.

Skills

Regulatory compliance knowledge

Privacy by design

Analytical and problem-solving

Communication and interpersonal skills

Independent work capability

Education

CIPP/US, CIPT, CIPM certifications (preferred)

Job description

HRTX is seeking an IT Auditor/Technology Risk Consultant to assess, implement, and maintain privacy-enhancing technologies and compliance solutions. You will collaborate with legal, IT, security, and data governance to ensure privacy controls are embedded in processes and systems.

The role involves recertification, access tracking, evidence gathering, and coordinating with engineering teams to integrate privacy requirements. Strong communication and independent work ethic are essential.