Risk Management and Compliance Officer

Handles Risk Management & PIMS activities that will cover validation, documentation, process validation and mapping and program implementation. Set and improve the risk management system of the organization from risk identification – assessment & mitigations, customer requirement and regulatory / statutory requirement. This will cover both IROAC and PIA.

Duties & Responsibilities

• Provides full support to the Risk Manager on various ERM and PIMS projects that need risks assessment and assessment on compliance with Standard and best-known practices.
• Carries out validation activities to ensure compliance of the members of the organization to compliance and risk management practice and process.
• Provides support for the organization & ADEC group of companies in pursuing compliance with ISO 31000 and ERM framework and certification to international standards (gap analysis, documentation, compliance audits) on ISO 27001 / 27701 / 9001 / 14001, 27001, HIPAA, SOC 2 and PCI-DSS.
• Works with Standardization and Improvement Officer & Management System Officer on process improvement methodologies (e.g. PDCA, TQM) to identify, analyze and improve existing processes brought about by an audit finding.
• Performs process and ISO peer reviews to ensure compliance of the organization on ISO 31000 / 27001 / 27701 and relevant international standards such as but not limited to ERM, HIPAA, and SOC 2.
• Assist the Risk Manager in improvement and development of risk management controls and systems.
• To provide support in carrying out due diligence activities and addressing compliance and operational requests arising from government requirements, tenders, or client obligations.
• Conducts and assists regular coordination meetings (virtual or face-to-face) through conference calls with key personnel of the organization, to discuss issues and other concerns encountered in the implementation of risk management activities and programs.
• Provides support in facilitation of RCA-CA (Root Cause Analysis – Corrective Action) sessions with process owners for risk resolution.
• Provides full support on ERM & PIMS various programs / projects that need support on identifying critical control points that need to be provided with control measures to ensure risk and change management can be initiated within the risk appetite of the organization.
• Responsible for providing necessary assistance and support in the implementation and management of ADEC's compliance program on Data Privacy in the Philippines and provides support to roll-out privacy programs and activities for Global entities.
• Provides administrative support in developing, reviewing and/or revising policies, guidelines, projects and/or programs of the Personal Information Controller(s) or Personal Information Processor(s) to ensure alignment with privacy by design approach.
• Assists in monitoring management of data breach and security incident by the PIP and/or PIC, such as but not limited to preparation and submission of reports and other documentation needed to concerned agencies to effectively and efficiently contribute in bringing solution and resolution.
• Serves as one of the contact persons of PIC and/or PIP vis-à-vis data subjects, the NPC and other national or global authorities within ADEC's scope in order to provide information and/or appropriate actions related to privacy security.
• Assists the DPO on conducting Privacy Impact Assessments, PIC's and PIP's compliance with DPA and its IRR and other applicable laws and policies to prevent legal implications and maintain adherence of activities, measures, projects and programs or systems for Philippine entities and support role for global roll-out activities.

Qualifications

• Associate degree or higher in Business Administration, Industrial Engineering or similar field.
• At least 5 years of solid work experience in compliance or as a Quality Engineer.
• Auditor certification (ISO 27001, 27701, 9001 14001, OHSAS 18001).

IMPT. NOTE: As this website allows us to collect your information through your resumes, please read our Privacy Notice before proceeding: