Senior Risk & Compliance Leader (DPO & Audit)

iQor; Carmen; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

iQor seeks a Manager or Senior Manager, Risk and Compliance to establish and maintain an enterprise-wide governance framework covering risk management, regulatory compliance, internal audit coordination, and data privacy in the Philippines.

The role ensures compliance with Philippine regulatory requirements, company standards, and applicable data protection laws while strengthening internal controls, managing audits, and promoting a culture of integrity, accountability, and risk awareness across

Qualifications

• Bachelor's degree in Business Administration, Finance, Accounting, Legal Management, Information Security, Information Technology, Risk Management, or related discipline.
• Minimum 7-10 years of progressive experience in risk management, compliance, governance, audit, data privacy, or internal controls.
• At least 3 years in a leadership or management role.
• Experience in BPO, shared services, financial services, insurance, healthcare, or highly regulated environments.
• Experience working with Philippine regulatory agencies and compliance frameworks.

Responsibilities

• Develop and implement enterprise risk management frameworks, policies, and processes.
• Conduct risk assessments and maintain organizational risk registers.
• Assess operational, financial, regulatory, technology, cybersecurity, and strategic risks.
• Monitor risk mitigation plans and provide recommendations to leadership.
• Prepare risk reports, dashboards, and executive updates.
• Promote a risk-aware culture across business functions.
• Ensure organizational compliance with Philippine laws, labor regulations, corporate governance requirements, and applicable industry standards.
• Investigate compliance concerns and coordinate corrective actions.
• Act as primary liaison with regulatory authorities and government agencies when required.
• Provide guidance to business leaders on compliance obligations and regulatory requirements.
• Develop and maintain internal control frameworks to safeguard company assets and ensure operational effectiveness.
• Coordinate internal audits, management reviews, and external audits.
• Ensure audit readiness and completeness of supporting documentation.
• Monitor remediation plans and closure of audit findings.
• Conduct control testing and compliance reviews.
• Lead privacy governance programs and PIAs/DPIAs.
• Serve as the designated Data Protection Officer (DPO).
• Monitor compliance with privacy requirements related to employee, client, vendor, and company data.
• Coordinate privacy incident investigations and breach management activities.
• Lead breach notification assessments and reporting requirements.
• Serve as primary contact with the National Privacy Commission.
• Monitor vendor and third-party compliance with privacy obligations.
• Conduct privacy awareness and training programs across the organization.
• Lead investigations involving compliance violations, privacy incidents, fraud, ethics concerns, and policy breaches.
• Conduct root cause analyses and develop corrective and preventive actions.
• Prepare incident reports for leadership review.
• Escalate significant risks and compliance concerns appropriately.

Skills

Regulatory compliance

Risk management

Internal controls

Audits

Data privacy

Stakeholder management

Governance

Policy development

Education

Bachelor's degree in related discipline

Master's degree is an advantage

Job description

iQor seeks a Manager or Senior Manager, Risk and Compliance to establish and maintain an enterprise-wide governance framework covering risk management, regulatory compliance, internal audit coordination, and data privacy in the Philippines.

The role ensures compliance with Philippine regulatory requirements, company standards, and applicable data protection laws while strengthening internal controls, managing audits, and promoting a culture of integrity, accountability, and risk awareness across