FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Governance, Risk & Compliance Manager
Satellite Office. Design and run an ongoing controls-testing program .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in risk and compliance management, including the development and implementation of compliance policies, conducting privacy impact assessments, and leading data protection initiatives. Proficient in regulatory requirements, risk management frameworks, and effective communication with senior executives and governance committees.
Highest-signal resume keywords
Risk And Compliance ManagementData Protection Officer ExperienceGRC Platform ProficiencyRegulatory Requirements KnowledgeProject Management Experience
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Control TestingRisk AssessmentPrivacy Impact AssessmentCompliance Policy DevelopmentIncident ReportingEnterprise Risk ManagementKRI Program DevelopmentStatutory ReportingControl Design AssessmentData Subject Request Administration
Soft Skills
Strong CommunicationStakeholder ManagementIndependent Presentation Skills
Tools & Technologies
GRC PlatformsSprintoVanta
Certifications & Qualifications
CPACIACISAISO 27001 Lead Auditor
Industry Keywords
BPOFinancial ServicesRegulated IndustryPhilippine Data Privacy ActUS Regulatory RequirementsSOC 2GDPRHIPAA
About the role
Key responsibilities & impact- Design and run an ongoing controls-testing program
- Assess control design and operating effectiveness through transaction and evidence sampling
- Maintain formal workpapers and assign ratings to controls tested
- Report control exceptions, remediation plans, and re-test results to the Risk Committee
- Coordinate closure of identified control gaps while maintaining independence
- Monitor adherence to laws, internal policies, industry standards, regulatory requirements, and client-contractual obligations
- Develop, implement, and maintain compliance policies and procedures
- Maintain the Compliance Register and oversee statutory reporting outside tax
- Monitor compliance findings and pending actions through formal closure
- Serve as the Company's registered Data Protection Officer with the National Privacy Commission
- Lead personal data breach response, including the 72-hour NPC notification requirement
- Conduct Privacy Impact Assessments and administer data subject requests
- Deliver privacy awareness training
- Operationalize Enterprise Risk Management and Governance frameworks
- Maintain enterprise risk registers and develop the KRI program
- Lead GRC incident reporting and ensure operational risk incidents are detected, reported, and mitigated
- Design Business Continuity and Crisis Management protocols
- Coordinate incident investigations and risk assessments with Legal and IT
- Own Risk Committee reporting and meeting cadence
- Provide independent risk opinions and advisory input on projects, systems, vendors, and process changes
- Present findings and risk insights to senior executives and committees
- Assist with GRC training programs and compliance awareness initiatives
Requirements
What you’ll need- Bachelor's degree in Accounting, Finance, Information Systems, Law or a related field
- 8+ years in risk and compliance management, internal audit, IT/compliance control testing, or GRC
- Experience in BPO, financial services or another regulated industry
- Professional certification preferred: CPA, CIA or CISA
- ISO 27001 Lead Auditor certification preferred
- Strong knowledge of regulatory requirements and risk management frameworks
- Experience with US regulatory requirements
- Working knowledge of the Philippine Data Privacy Act and NPC requirements
- Hands-on experience with a GRC platform such as Sprinto, Vanta or similar
- Demonstrated project management experience
- Experience issuing independent risk opinions and advisory input on projects, systems, vendors, and process changes
- Comfortable presenting findings directly and independently to senior executives and committees
- Strong communication and stakeholder management skills
- Experience with control testing, RCSA, KRIs and enterprise risk registers
- Experience supporting SOC 2, ISO 27001, GDPR, HIPAA or similar assurance requirements
- Previous experience as a DPO or significant hands-on privacy compliance experience
- Experience presenting directly to ExCo, Risk Committees, Boards or similar governance forums
Benefits
Comp & perks- Learning opportunities, mentoring, and support
- Team-building experiences and company-wide celebrations
- Wellness programs
- Modern, comfortable offices in premium business hubs
- World-class office spaces
- Work with global brands and international client teams
- Professional development and continuous learning opportunities
- Employee programs and career growth support