Senior Manager, Risk and Compliance

The Manager or Senior Manager, Risk and Compliance is responsible for establishing and maintaining an enterprise-wide governance framework covering risk management, regulatory compliance, internal audit coordination, and data privacy. This role ensures compliance with Philippine regulatory requirements,

Company's corporate standards, and applicable data protection laws while strengthening internal controls, managing audits, and promoting a culture of integrity, accountability, and risk awareness across the organization.

The position also serves as the organization's Data Protection Officer (DPO) in accordance with the

Philippine Data Privacy Act of 2012 and National Privacy Commission (NPC) regulations

Key Responsibilities:

1. Risk Management & Governance

• Develop and implement enterprise risk management frameworks, policies, and processes.

• Conduct risk assessments and maintain organizational risk registers.

• Assess operational, financial, regulatory, technology, cybersecurity, and strategic risks.

• Monitor risk mitigation plans and provide recommendations to leadership.

• Prepare risk reports, dashboards, and executive updates.

• Promote a risk-aware culture across business functions.

2. Regulatory Compliance

• Ensure organizational compliance with Philippine laws, labor regulations, corporate governance

requirements, and applicable industry standards.

• Monitor regulatory developments and assess their impact on company policies and operations.

• Develop, review, and maintain compliance policies, procedures, and governance standards.

• Investigate compliance concerns and coordinate corrective actions.

• Act as primary liaison with regulatory authorities and government agencies when required.

• Provide guidance to business leaders on compliance obligations and regulatory requirements.

3. Audit & Internal Controls

• Develop and maintain internal control frameworks to safeguard company assets and ensure operational effectiveness.

• Coordinate internal audits, management reviews, and external audits.

• Ensure audit readiness and completeness of supporting documentation.

• Monitor remediation plans and closure of audit findings.

• Conduct control testing and compliance reviews.

• Partner with HR, Finance, Operations, Technology, Procurement, and Legal teams to strengthen

governance and controls.

4. Data Privacy & Protection (DPO Function)

• Serve as the designated Data Protection Officer (DPO).

• Ensure compliance with the Data Privacy Act of 2012, NPC issuances, and applicable global

privacy standards.

• Develop and implement privacy governance programs, policies, and procedures.

• Conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).

• Monitor compliance with privacy requirements related to employee, client, vendor, and company

data.

• Maintain records of processing activities and data inventories.

• Coordinate privacy incident investigations and breach management activities.

• Lead breach notification assessments and reporting requirements.

• Serve as primary contact with the National Privacy Commission.

• Monitor vendor and third-party compliance with privacy obligations.

• Conduct privacy awareness and training programs across the organization.

5. Investigations & Incident Management

• Lead investigations involving compliance violations, privacy incidents, fraud, ethics concerns,

and policy breaches.

• Conduct root cause analyses and develop corrective and preventive actions.

• Prepare incident reports for leadership review.

• Escalate significant risks and compliance concerns appropriately.

• Ensure confidentiality, fairness, and integrity throughout investigative processes.

6. Stakeholder Engagement & Advisory

• Advise senior leadership regarding risk exposure, compliance obligations, audit results, and privacy matters.

• Support strategic projects by identifying regulatory, compliance, privacy, and operational risks.

• Collaborate with internal and external stakeholders to achieve governance objectives.

• Communicate complex compliance and risk matters clearly to business leaders.

• Represent Risk, Compliance, Audit, and Privacy functions in governance forums and project

teams.

7. Training & Culture

• Develop and deliver training programs on compliance, ethics, risk management, audit readiness,

and data privacy.

• Promote awareness of regulatory and privacy obligations across all levels of the organization.

• Support organizational initiatives that strengthen ethical conduct and governance culture.

Qualifications

Education

• Bachelor's degree in Business Administration, Finance, Accounting, Legal Management,

Information Security, Information Technology, Risk Management, or related discipline.

• Master's degree is an advantage.

Experience

• Minimum 7-10 years of progressive experience in risk management, compliance, governance,

audit,data privacy,or internal controls.

• At least 3 years in a leadership or management role.

• Experience in BPO, shared services, financial services, insurance, healthcare, or highly regulated

industries preferred.

• Experience working with Philippine regulatory agencies and compliance frameworks.

Certifications (Preferred)

• Certified Internal Auditor (CIA).

• Certified Information Systems Auditor (CISA).

• Certified Data Privacy Professional (CDPP) or equivalent.

Knowledge & Skills

• Strong understanding of:

o Philippine Data Privacy Act of 2012

o National Privacy Commission regulations

o Enterprise Risk Management principles

o Internal controls and audit methodologies

o Corporate governance practices

o Regulatory compliance frameworks

• Excellent analytical and problem-solving skills.

• Strong stakeholder management and influencing capabilities.

• Ability to handle confidential and sensitive information.

• Excellent written and verbal communication skills.

Apply Now!