Senior Manager, Risk and Compliance-Alabang

iQor; Las Piñas; In loco; PHP 3.500.000 - 5.200.000; Tempo pieno

Descrizione del lavoro

iQor in the Philippines is seeking a Manager or Senior Manager, Risk and Compliance to establish and maintain an enterprise-wide governance framework covering risk management, regulatory compliance, internal audit coordination, and data privacy. This role ensures compliance with Philippine regulatory requirements, corporate standards, and data protection laws while strengthening internal controls.

You will lead risk assessments, monitor controls, coordinate audits, and serve as the DPO for

Competenze

• Minimum 7-10 years in risk management, compliance, governance, audit, data privacy, or internal controls.
• At least 3 years in a leadership or management role.
• Experience with Philippine regulatory agencies and compliance frameworks.

Mansioni

• Develop and maintain enterprise risk management frameworks, policies, and processes.
• Coordinate internal audits, management reviews, and external audits.
• Lead privacy program as DPO; manage DPIAs and breach handling.
• Monitor regulatory changes and advise leadership on actions.
• Promote governance culture and risk awareness across functions.
• Engage regulators and stakeholders to strengthen controls.

Conoscenze

ERM principles

Regulatory compliance

Data privacy knowledge

Internal controls

Governance practices

Auditing methodologies

Stakeholder management

Excellent communication

Formazione

Bachelor's degree in related discipline

Master's degree is an advantage

Descrizione del lavoro

The Manager or Senior Manager, Risk and Compliance is responsible for establishing and maintaining an enterprise-wide governance framework covering risk management, regulatory compliance, internal audit coordination, and data privacy. This role ensures compliance with Philippine regulatory requirements,

Company's corporate standards, and applicable data protection laws while strengthening internal controls, managing audits, and promoting a culture of integrity, accountability, and risk awareness across the organization.

Key Responsibilities

• Develop and implement enterprise risk management frameworks, policies, and processes.
• Conduct risk assessments and maintain organizational risk registers.
• Assess operational, financial, regulatory, technology, cybersecurity, and strategic risks.
• Monitor risk mitigation plans and provide recommendations to leadership.
• Prepare risk reports, dashboards, and executive updates.
• Promote a risk-aware culture across business functions.

2. Regulatory Compliance

• Ensure organizational compliance with Philippine laws, labor regulations, corporate governance requirements, and applicable industry standards.
• Monitor regulatory developments and assess their impact on company policies and operations.
• Develop, review, and maintain compliance policies, procedures, and governance standards.
• Investigate compliance concerns and coordinate corrective actions.
• Act as primary liaison with regulatory authorities and government agencies when required.
• Provide guidance to business leaders on compliance obligations and regulatory requirements.

3. Audit & Internal Controls

• Develop and maintain internal control frameworks to safeguard company assets and ensure operational effectiveness.
• Coordinate internal audits, management reviews, and external audits.
• Ensure audit readiness and completeness of supporting documentation.
• Monitor remediation plans and closure of audit findings.
• Conduct control testing and compliance reviews.
• Partner with HR, Finance, Operations, Technology, Procurement, and Legal teams to strengthen governance and controls.

4. Data Privacy & Protection (DPO Function)

• Serve as the designated Data Protection Officer (DPO).
• Ensure compliance with the Data Privacy Act of 2012, NPC issuances, and applicable global privacy standards.
• Develop and implement privacy governance programs, policies, and procedures.
• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
• Monitor compliance with privacy requirements related to employee, client, vendor, and company data.
• Coordinate privacy incident investigations and breach management activities.
• Lead breach notification assessments and reporting requirements.
• Serve as primary contact with the National Privacy Commission.
• Monitor vendor and third-party compliance with privacy obligations.
• Conduct privacy awareness and training programs across the organization.

5. Investigations & Incident Management

• Lead investigations involving compliance violations, privacy incidents, fraud, ethics concerns, and policy breaches.
• Conduct root cause analyses and develop corrective and preventive actions.
• Prepare incident reports for leadership review.
• Escalate significant risks and compliance concerns appropriately.
• Ensure confidentiality, fairness, and integrity throughout investigative processes.

6. Stakeholder Engagement & Advisory

• Advise senior leadership regarding risk exposure, compliance obligations, audit results, and privacy matters.
• Support strategic projects by identifying regulatory, compliance, privacy, and operational risks.
• Collaborate with internal and external stakeholders to achieve governance objectives.
• Communicate complex compliance and risk matters clearly to business leaders.
• Represent Risk, Compliance, Audit, and Privacy functions in governance forums and project teams.

7. Training & Culture

• Develop and deliver training programs on compliance, ethics, risk management, audit readiness, and data privacy.
• Promote awareness of regulatory and privacy obligations across all levels of the organization.
• Support organizational initiatives that strengthen ethical conduct and governance culture.

Qualifications

Education

• Bachelor's degree in Business Administration, Finance, Accounting, Legal Management, Information Security, Information Technology, Risk Management, or related discipline.
• Master's degree is an advantage.

Experience

• Minimum 7-10 years of progressive experience in risk management, compliance, governance, audit,data privacy,or internal controls.
• At least 3 years in a leadership or management role.
• Experience in BPO, shared services, financial services, insurance, healthcare, or highly regulated
• Experience working with Philippine regulatory agencies and compliance frameworks.

Knowledge & Skills

• Strong understanding of:
  • Philippine Data Privacy Act of 2012
  • National Privacy Commission regulations
  • Enterprise Risk Management principles
  • Internal controls and audit methodologies
  • Corporate governance practices
  • Regulatory compliance frameworks
• Excellent analytical and problem-solving skills.
• Strong stakeholder management and influencing capabilities.
• Ability to handle confidential and sensitive information.
• Excellent written and verbal communication skills.