Senior GRC & DPO Manager

Satellite Office; Pasig; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Satellite Office is seeking an experienced GRC Manager to lead assurance across controls, compliance, data privacy, and enterprise risk in Ortigas. You will test controls, monitor regulatory adherence, and act as Data Protection Officer under the NPC. The role involves interaction with senior executives and governance committees.

You'll manage risk registers, KRIs, and incident response, while shaping policies and training programs to strengthen governance across the organization.

Qualifications

• Eight-plus years in risk and compliance management, internal audit, IT/compliance control testing, or GRC.
• Experience with regulated industries (BPO/financial services) is preferred.
• Professional certifications: CPA, CIA, or CISA preferred.
• ISO 27001 Lead Auditor certification is preferred.
• Good knowledge of US regulatory requirements; Australian knowledge is a plus.
• Experience with Philippine NPC/DP Act requirements is advantageous.
• Hands-on experience with GRC platforms and ability to learn new tools.

Responsibilities

• Design and run an ongoing controls-testing program, assess design and operating effectiveness, maintain formal workpapers, and assign control ratings.
• Monitor compliance with laws, policies, and standards (ISO27001, SOC2, GDPR, HIPAA) and coordinate regulatory/client obligations.
• Serve as Data Protection Officer; manage NPC registration, 72-hour breach notification, PIAs, and data subject requests.
• Operationalize Enterprise Risk Management and maintain risk registers, KRIs, and incident governance.
• Own Risk Committee reporting, governance liaison, and develop/deliver GRC training and awareness initiatives.
• Provide independent risk opinions and present findings to senior executives and committees.

Skills

GRC expertise

Internal audit

Regulatory compliance

Data privacy

Risk assessment

Stakeholder management

Control testing

Policy development

DPO experience

Communication

Education

Bachelor's degree in Accounting/Finance/IS/Law

Tools

Sprinto

Vanta

Job description

Satellite Office is seeking an experienced GRC Manager to lead assurance across controls, compliance, data privacy, and enterprise risk in Ortigas. You will test controls, monitor regulatory adherence, and act as Data Protection Officer under the NPC. The role involves interaction with senior executives and governance committees.

You'll manage risk registers, KRIs, and incident response, while shaping policies and training programs to strengthen governance across the organization.