Senior Compliance & Audit Lead – IMS & ISO

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Hammerjack Pty Ltd in the Philippines is seeking a Compliance Implementation Associate – Senior Team Lead to oversee day-to-day compliance, audit, risk governance, and IMS activities. The role supervises Implementation Associates and Auditors and acts as the Lead Implementation Auditor for the audit program.

The position ensures audit readiness, control effectiveness, corrective actions, and adherence to ISO 27001, ISO 22301, HIPAA/HITRUST, PCI DSS 4.0, and SOC 2 Type II, along with internal and

Qualifications

• Bachelor's degree in a related field; equivalent experience may be considered.
• 3–5 years of relevant experience in compliance, internal audit, risk, or information security.
• Experience leading or supervising audit/compliance teams.

Responsibilities

• Lead, coach, and supervise Compliance Implementation Associates and Implementation Auditors.
• Oversee audit planning, execution, reporting, and follow-up within the audit program.
• Review audit findings and corrective actions; monitor remediation progress.
• Maintain compliance records, document control, and management reporting.
• Coordinate compliance reviews and ensure policy, procedure, and risk governance alignment.
• Support IMS development and risk governance activities across the organization.

Skills

Team leadership

Audit management

Risk management

ISO knowledge

Regulatory compliance

Stakeholder management

Analytics

Communication

Education

Bachelor's degree in Industrial Engineering

Job description

Hammerjack Pty Ltd in the Philippines is seeking a Compliance Implementation Associate – Senior Team Lead to oversee day-to-day compliance, audit, risk governance, and IMS activities. The role supervises Implementation Associates and Auditors and acts as the Lead Implementation Auditor for the audit program.

The position ensures audit readiness, control effectiveness, corrective actions, and adherence to ISO 27001, ISO 22301, HIPAA/HITRUST, PCI DSS 4.0, and SOC 2 Type II, along with internal and