IT Security & Systems Compliance Specialist

Coins Ph; Flippin (AR, KY); On-site; USD 10,000 - 15,000; Full time

Job summary

Coins is the leading crypto brand in the Philippines, supporting millions of users through a regulated platform with BSP licenses. The role focuses on IT compliance, risk management, and audit readiness across critical systems and third‑party vendors.

Your responsibilities include validating regulatory controls, maintaining evidence, and supporting BSP/AMLC examinations to ensure strong governance and system integrity.

Qualifications

• Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, Business, Finance, or a related field.
• 2+ years hands-on experience in IT Compliance, IT Risk, IT Audit, Information Security Governance, Technology Risk, or related function.
• Experience in regulated environments (banking/fintech/payments/e-money/VASP).

Responsibilities

• Support IT compliance with regulatory requirements and maintain documentation and trackers.
• Perform IT security, access governance, and ITGC reviews for critical systems.
• Conduct compliance reviews of critical systems and compliance technology, including payment, wallet/custody, AML/CFT, screening, and Travel Rule systems.
• Support technology projects by validating compliance and control requirements.
• Perform IT vendor and third-party compliance assessments and monitor remediation.
• Support AML/CFT and VASP controls through system, access, configuration, and audit-trail reviews.
• Assist BSP/AMLC examinations, audits, and remediation activities through evidence preparation and issue tracking.

Skills

IT Compliance

IT General Controls (ITGC)

Access governance

Regulatory requirements

Education

Bachelor's degree in IT/CS/Info Systems

Tools

GRC platforms

Audit evidence tools

Job description

Join the Pioneer Crypto Brand in the Philippines!

Coins is the most established crypto brand in The Philippines and has gained the trust of more than 18 million users. Through the easy-to-use mobile app, users can buy and sell a variety of different cryptocurrencies and access a wide range of financial services.Coins is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and is the first ever crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

Support the IT Compliance Officer in the execution and monitoring of IT security and systems compliance activities, including access governance, ITGC, critical systems and compliance tools, vendor compliance, regulatory requirements, and audit/examination activities. The Specialist is expected to independently perform established IT compliance processes, maintain evidence and documentation, identify control gaps, and coordinate remediation with relevant stakeholders.

Key Responsibilities

Support compliance with applicable IT-related regulatory requirements and maintain supporting documentation and trackers. Perform IT security, access governance, and ITGC reviews for critical systems. Conduct compliance reviews of critical systems and compliance technology, including payment, wallet/custody, AML/CFT, screening, and Travel Rule systems. Support technology projects, system changes, and implementations by validating compliance and control requirements. Perform IT vendor and third-party compliance assessments and monitor remediation. Support AML/CFT and VASP technology controls through system, access, configuration, and audit-trail reviews. Support BSP/AMLC examinations, audits, and remediation activities through evidence preparation, documentation, and issue tracking.

Qualifications

Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, Business, Finance, or a related field. At least 2 years of hands-on experience in IT Compliance, IT Risk, IT Audit, Information Security Governance, Technology Risk, or a related function. Prior experience performing IT compliance activities, preferably within banking, fintech, payments, e-money, VASP, or another regulated environment. Hands-on experience with ITGC, access reviews, IT security controls, vendor due diligence, audit evidence, and remediation tracking. Experience supporting regulatory examinations, internal/external audits, or compliance assessments. Familiarity with BSP regulatory requirements and technology-related regulatory controls. Experience working with GRC, audit, compliance, access governance, or other control-management tools is an advantage.

Key Skills

• IT Compliance,
• IT General Controls (ITGC), IT security, access governance, and technology risk managementIT systems/control assessment, evidence validation, gap identification, and remediation trackingTechnology change management, SDLC, business continuity, disaster recovery, and system resilienceIT vendor/third-party due diligence and technology outsourcing complianceWorking knowledge of
• BSP, AMLC, NPC, and other applicable regulatory requirementsFamiliarity with
• VASP, AML/CFT, transaction monitoring, sanctions/wallet screening, Travel Rule, blockchain analytics, and custody technologyKnowledge of
• ISO 2701, NIST, COBIT, SOC 1/SOC 2
• , or similar frameworksFamiliarity with
• GRC, audit, risk, compliance, or access governance platformsProficiency in SQL and data analysis
• for validating system data, transaction records, compliance controls, audit trails, and regulatory reportsAbility to analyze
• system configurations, data flows, interfaces, logs, and control evidenceStrong
• analytical, problem-solving, documentation, communication, and stakeholder management skills

Meaningful Collaborations

• The successful candidate will work cross-functionally with other relevant teams to carry out implementations that will improve and create an impact on customer experience.

Scalable Growth -

Be part of a fast-growing organization with the vision to expand its territories outside APAC which will provide opportunities for career advancement.

A Space For Bright Ideas -

Let your bright ideas be converted into meaningful changes! Coins culture welcomes new ideas backed up by data to create an impact.