Posted - March 06, 2026
Compliance & Audit Manager
- Clark, Pampanga, PH
- Full time | Onsite
- Day Shift | 6:00 AM - 3:00 PM
Job Description
The Compliance & Audit Manager is responsible for ensuring that the company complies with all applicable regulatory, contractual, client, and internal requirements. This role plays a critical part in maintaining compliance with ISO standards, data privacy regulations (GDPR, Data Privacy Act), insurance requirements, and BPO-specific client obligations.
The ideal candidate must have a strong BPO background, with hands-on experience supporting audits,
client compliance requirements, and operational risk management in an outsourcing environment.
Key Responsibilities:
Compliance, Governance & Risk Management
- Develop, implement, and maintain the company’s compliance framework across all business functions.
- Ensure ongoing compliance with ISO standards (e.g., ISO 27001, ISO 9001, ISO 27701, or related certifications).
- Oversee compliance with data privacy laws and regulations, including GDPR and the Philippine Data Privacy Act.
- Conduct regular compliance and risk assessments to identify, assess, and mitigate regulatory, operational, and client-related risks.
- Actively monitor changes in law, regulations, and client compliance requirements, and assess as necessary.
- Act as a key point of contact for compliance-related inquiries from clients, partners, and regulators.
Audit Management
- Lead and manage internal and external audits, including ISO audits, client audits, and third-party assessments.
- Prepare audit documentation, evidence, policies, and reports.
- Track audit findings, corrective action plans, and continuous improvement initiatives.
- Escalate high-risk findings and unresolved issues to senior management and provide regular audit status updates.
- Coordinate with internal teams to ensure audit readiness at all times.
Client & Contractual Requirements
- Review and ensure compliance with client-specific requirements, including security, data protection, and operational controls.
- Support onboarding of new clients by assessing compliance and risk requirements.
- Respond to client due diligence questionnaires, security assessments, and compliance reviews.
Insurance & Business Requirements
- Ensure compliance with business insurance requirements, including but not limited to:
○ Professional Liability / Errors & Omissions
○ Cybersecurity / Cyber Liability
○ General Liability - Coordinate with finance, legal, and insurance providers to maintain required coverage and documentation.
- Monitor contractual obligations related to risk, liability, and compliance.
Policies, Training & Awareness
- Draft, review, and update company policies (e.g., data privacy, information security, acceptable use, risk management).
- Conduct compliance and data privacy training for employees.
- Promote a strong culture of compliance, accountability, and risk awareness.
Qualifications & Requirements:
- ISO 27001 Lead Implementer or Lead Auditor.
- Certified Information Privacy Professional (CIPP/E, CIPP/A, or equivalent).
- Certified Internal Auditor (CIA).
- Data Protection Officer (DPO) training or certification.
