Compliance Officer – Risk Management & Data Privacy

About the role

The Compliance Officer will support the Risk Manager in implementing and maintaining the organization’s Enterprise Risk Management (ERM) and Personal Information Management System (PIMS) programs. The role focuses on risk identification, assessment, mitigation, and ensuring compliance with international standards and local data‑privacy regulations.

Key responsibilities

• Assist the Risk Manager on ERM and PIMS projects, performing risk assessments and compliance checks.
• Conduct validation activities to ensure adherence to risk‑management processes and standards.
• Support ISO 31000, ISO 27001, ISO 27701, ISO 9001, ISO 14001, HIPAA, SOC 2 and PCI‑DSS gap analyses, documentation, and audit preparation.
• Collaborate with Standardization and Improvement Officer on process‑improvement methodologies (PDCA, TQM).
• Facilitate root‑cause analysis and corrective‑action sessions with process owners.
• Manage data‑privacy compliance for the Philippines and assist global privacy program roll‑outs.
• Prepare and submit reports on data breaches and security incidents.

Required profile

• Proven experience in compliance, risk management or internal audit.
• Strong knowledge of international standards (ISO, HIPAA, SOC 2, PCI‑DSS) and data‑privacy regulations.
• Ability to work independently and coordinate virtual or face‑to‑face meetings with stakeholders.

Required skills

• ISO 31000
• ISO 27001
• ISO 27701
• ISO 9001
• ISO 14001
• HIPAA
• SOC 2
• PCI‑DSS
• Risk Management
• Enterprise Risk Management (ERM)
• Personal Information Management System (PIMS)
• Data Privacy
• Root Cause Analysis
• PDCA
• TQM