Senior GRC Manager: Risk, Compliance & Data Privacy

Satellite Office; Pasig; On-site; PHP 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Certification support

DPO training

Exposure to senior leadership

Job summary

Satellite Office is seeking an experienced GRC Manager in Ortigas to join our Risk Management team. You will oversee assurance testing, compliance posture, and data privacy responsibilities including acting as the DPO under the Philippine Data Privacy Act.

You will manage controls testing, compliance programs, ERM, and governance activities while coordinating with senior executives and risk committees to ensure timely remediation and reporting.

Qualifications

• 8+ years in risk and compliance management, internal audit, IT/compliance control testing, or GRC.
• Experience in BPO, financial services or another regulated industry.
• CPA, CIA or CISA certification preferred.
• ISO 27001 Lead Auditor certification preferred.
• Strong knowledge of regulatory requirements and risk management frameworks.
• Experience with US regulatory requirements; Australian knowledge advantageous.
• Hands-on experience with GRC platforms such as Sprinto or Vanta; ability to learn a new platform.

Responsibilities

• Design and run an ongoing controls-testing program.
• Assess design and operating effectiveness of controls; maintain formal workpapers and assign control ratings.
• Report control exceptions, remediation plans, and re-test results to the Risk Committee.
• Coordinate with control owners to close identified gaps independently from the testing function.
• Monitor adherence to laws, internal policies, and standards like ISO27001, SOC2, GDPR, HIPAA.
• Develop, implement, and maintain compliance policies, procedures and registers.
• Serve as the Company’s DPO with NPC; lead breach response and PIAs.
• Operationalize ERM and Governance frameworks; maintain risk registers and KRIs.
• Present findings and risk insights to senior executives and committees.

Skills

Risk Management

Compliance

Internal Audit

GRC Tools

Stakeholder Mgmt

Project Management

Education

Bachelor's degree

Tools

Sprinto

Vanta

Job description

Satellite Office is seeking an experienced GRC Manager in Ortigas to join our Risk Management team. You will oversee assurance testing, compliance posture, and data privacy responsibilities including acting as the DPO under the Philippine Data Privacy Act.

You will manage controls testing, compliance programs, ERM, and governance activities while coordinating with senior executives and risk committees to ensure timely remediation and reporting.