Risk Management and Compliance Analyst

Acquire Intelligence; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Acquire Intelligence in Ortigas, Pasig City, Philippines, seeks a Risk Management and Compliance Officer to uphold information security controls under our ISMS. You will coordinate audits, remediate non-compliances, and provide leadership with timely risk insights.

The role requires collaboration, strong analytical skills, and experience in large, fast-paced environments, with knowledge of ISO 27001/31000 and related standards. On-site role with opportunities for process improvement.

Qualifications

• Strong analytical and problem-solving skills.
• Excellent oral and written communication skills.
• Knowledge of company processes and information security controls.
• Ability to work collaboratively and independently.
• Critical thinking and decision-making skills.
• Experience in a large, fast-paced environment.
• Flexibility regarding shifting work schedule.
• Preferably knowledge of ISO 27001, ISO 31000, PCI-DSS, SOC, HIPAA.

Responsibilities

• Maintain the integrity of critical business documentation through regular reviews and audits.
• Drive information security and risk management program using ISO 27001 and 31000.
• Own internal audit lifecycle from planning to closure with calendar management.
• Identify risks and translate findings into corrective actions.
• Provide timely reports on information risk management and audit status.
• Govern remediation tracking and closure of action items across owners.
• Support internal and external audits with evidence and timely responses.
• Uphold quality and consistency of compliance outputs through peer reviews.

Skills

Analytical thinking

Problem-solving

Communication skills

Collaboration

Independent work

Critical thinking

Flexibility

ISO 27001 knowledge

ISO 31000 knowledge

PCI-DSS knowledge

SOC knowledge

HIPAA knowledge

Job description

We’re an award-winning global outsourcer providing contact center and back office services on behalf of our global clients. Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!Risk Management and Compliance Officer Ortigas Site, Pasig City, Philippines Reporting to: Compliance HeadAs a leading global outsourcer delivering contact centre and back-office services, we hold ourselves to the highest standards of operational excellence. The Risk Management and Compliance Officer play a central role in upholding those standards, directly contributing to the achievement of business objectives and the long-term success of the organisation.A SNAPSHOT OF YOUR ROLEThe Risk Management and Compliance Officer is responsible for ensuring the business maintains security controls in accordance with the Information Security Management System implemented by Acquire Intelligence. The role requires active coordination with process owners to identify and remediate non-compliances in a timely and consistent manner. A typical day in this role spans the following responsibilities:•Maintain the integrity and currency of critical business documentation by conducting regular, structured reviews and audits of process documents, Standard Operating Environment specifications, Operations Manuals, and Risk Assessments. Ensure all documentation remains accurate, fit for purpose, and aligned with organizational and compliance standards at all times.•Drive consistent and rigorous execution of the Information Security and Risk Management program, applying industry-grade frameworks such as ISO 27001 and 31000 to systematically identify, assess, and treat information risks across the business. Ensure the program delivers measurable outcomes that strengthen the organisation's overall risk posture.•Own the internal audit lifecycle from planning through to closure. Develop and maintain the annual audit calendar, define timelines, and coordinate audit activities to ensure comprehensive, uninterrupted coverage across all in-scope areas of the business.•Proactively identify emerging and existing areas of risk, translating findings into actionable corrective action plans. Provide clear, practical guidance to process owners on issue resolution and risk prevention, building organisational capability to manage compliance obligations independently and sustainably.•Serve as a trusted advisor to leadership team by delivering timely, accurate, and insightful reports on the status and performance of Information Risk Management and Internal Audit programmes. Ensure decision-makers have the visibility they need to act with confidence.•Govern the end-to-end remediation process by tracking and monitoring all corrective and preventive action items arising from audit findings. Maintain accountability across process owners until gaps are fully closed and risks are effectively mitigated.•Support the successful completion of internal and external audits by providing timely, well-organised audit evidence and ensuring all identified remediation commitments are implemented to the required standard and within agreed timeframes.•Uphold the quality and consistency of compliance outputs by conducting thorough peer reviews of Risk Assessments and Compliance Audit Reports prepared by team members, fostering a culture of rigour, precision, and professional excellence within the team.•Embody and actively promote Acquire Intelligence's values in every interaction, both internally and externally. Model the behaviours that reinforce a culture of integrity, accountability, and continuous improvement across the organisation.Page 2 of 2•Contribute to the broader data privacy and information security agenda by taking on additional responsibilities as directed by Acquire Intelligence and its entities, ensuring the rights of data subjects are protected and upheld at all times.A BIT ABOUT YOU•Strong analytical and problem-solving skills.•Excellent oral and written communication skills.•Knowledge of company processes and information security controls.•Ability to work collaboratively and independently•Critical thinking and decision-making skills•Experience working in a large fast-paced organizational environment•Flexibility as regards shifting work schedule•Preferably with strong knowledge of Information Security practices based on ISO 27001, ISO 31000, PCI-DSS, SOC and HIPAA.WHAT SUCCESS LOOKS LIKE•Internal Audit and Risk Assessment records are kept up-to-date and relevant•Accurate and clear documentation of the business documents such as the SOE, Operations Manual, Policies and Procedures by ensuring they are regularly audited.•Consistent monitoring and tracking of remediation plans.•Highly satisfied clients, both internal and external.•Achievement of KPIs.WHAT WE VALUEWe’re proud of our diverse global team, all working in a collaborative environment and happy to share these common values:•Collaboration: Brilliant jerks can be brilliant elsewhere.•Impact: Do, get it done, create impact.•Passion: Be positive, and bring passion and energy.•Transparency: A transparent team can help each other.Join the A-Team and experience the A-Life!