Compliance Specialist

Highlights

• Competitive compensation and benefits packages
• Continuous professional development and learning opportunities
• Regular engagement activities and events

______________________________________________________

COMPLIANCE SPECIALIST

Work for our global clients and immerse in our rich and diverse company culture where you can thrive, grow and be #DecidedlyDifferent!

Position Overview:

The Compliance Specialist - Data Management & SOC 2 Compliance shall support the organization in establishing, maintaining, monitoring, and continuously improving its data management, information security compliance, and SOC 2 control environment.

This position shall assist in coordinating compliance requirements across departments, maintaining compliance documentation and evidence, monitoring the implementation and effectiveness of assigned controls, and supporting internal and external audits and assessments. The role shall work closely with the Data Privacy Officer, Information Technology, Legal, Human Resources, Business Innovation, Workplace Experience and Compliance, and other process owners to ensure that applicable regulatory, contractual, and organizational requirements are translated into documented and sustainable controls.

The position shall also support data inventory, data classification, records management, privacy and security assessments, control testing, remediation tracking, and preparation of audit evidence for SOC 2 and other applicable compliance requirements.

Duties and Responsibilities:

Should include the following but may not be limited to:

Data Management & Governance

• Support the development, implementation, maintenance, and continuous improvement of the Company's data management and governance framework.
• Maintain and regularly update data inventories, data flow documentation, records of processing activities, data classifications, and other data governance records as applicable.
• Coordinate with process owners to identify and document the types of data collected, processed, stored, shared, retained, and disposed of within their respective processes.
• Assist in reviewing data collection and processing activities to determine whether appropriate business, privacy, security, retention, and access controls are established.
• Support the implementation of data minimization, data retention, data disposal, and secure handling requirements across applicable business processes.
• Monitor compliance with established data management policies, standards, procedures, and guidelines.
• Assist in identifying data management gaps and coordinate with process owners in developing and tracking corrective action plans.
• Maintain appropriate documentation and evidence supporting the organization's data management and governance activities.

Data Privacy & Protection Support

• Support the Data Privacy Compliance in the implementation and monitoring of the organization's data privacy program and applicable requirements under the Data Privacy Act of 2012 and its implementing rules and regulations.
• Assist in coordinating Privacy Impact Assessments (PIAs), data inventories, data processing reviews, and other privacy-related assessments with process owners.
• Maintain the PIA tracker and monitor the completion, review, and remediation of identified privacy risks and control gaps.
• Assist in reviewing new or revised forms, processes, systems, applications, and business activities for potential data privacy and data protection requirements.
• Support the review and maintenance of data processing agreements, data sharing agreements, confidentiality agreements, and other relevant documentation, as assigned.
• Assist in monitoring third-party and vendor data processing activities and the completion of applicable privacy and security requirements.
• Support the documentation, assessment, and tracking of potential data privacy incidents in coordination with the Data Privacy Officer and relevant process owners.

SOC 2 Compliance and Control Management

• Support the implementation, maintenance, and continuous improvement of the Company's SOC 2 compliance program and control environment.
• Maintain the SOC 2 control matrix, including control descriptions, control owners, frequency, evidence requirements, and applicable systems or processes.
• Coordinate with designated control owners to confirm ownership, implementation status, and operating effectiveness of assigned controls.
• Assist departments in identifying existing policies, procedures, processes, and controls that address applicable SOC 2 requirements.
• Collect, organize, validate, and maintain audit evidence supporting the operation of SOC 2 controls.
• Perform initial review of submitted evidence for completeness, accuracy, relevance, and appropriate coverage of the applicable control period.
• Monitor control activities and evidence submissions against established schedules and follow up with control owners on outstanding requirements.
• Maintain the SOC 2 compliance tracker, remediation tracker, and control action plans.
• Assist in identifying control gaps, exceptions, deficiencies, and areas requiring remediation.
• Coordinate with control owners to develop and monitor remediation plans, including responsible owners, target dates, status, and supporting evidence.
• Assist in preparing documentation and evidence requested by external auditors, assessors, consultants, and other authorized parties.
• Support periodic control reviews and readiness assessments prior to SOC 2 audits or examinations.

Compliance Monitoring and Assessment

• Conduct periodic compliance reviews, control checks, and assessments based on approved compliance programs and schedules.
• Assist in evaluating whether documented controls are implemented consistently and are supported by appropriate evidence.
• Identify deviations from established policies, procedures, standards, and control requirements and escalate material findings to the appropriate management or process owner.
• Maintain a centralized compliance issues and action-plan tracker covering identified gaps, corrective actions, responsible owners, due dates, and status.
• Assist in monitoring the closure and effectiveness of corrective and preventive actions.
• Support risk and control assessments, including identification of control gaps and potential business, privacy, security, and compliance risks.
• Assist in mapping regulatory, contractual, customer, and internal requirements to applicable organizational controls.

Policies, Procedures and Documentation

• Assist in developing, reviewing, and maintaining policies, standards, procedures, guidelines, forms, checklists, and other compliance documentation.
• Conduct periodic reviews of compliance documents to ensure that they remain current, relevant, and aligned with applicable requirements.
• Maintain appropriate version control and document repositories for compliance-related records.
• Assist process owners in documenting key controls, procedures, workflows, and evidence requirements.
• Support the development of compliance templates, trackers, checklists, and monitoring tools.
• Ensure that compliance records and supporting evidence are appropriately organized and readily retrievable for authorized review and audit purposes.

Audit and Regulatory Compliance Support

• Support internal and external compliance audits, SOC 2 assessments, customer audits, regulatory assessments, and other authorized compliance reviews.
• Coordinate the collection and submission of requested documents and evidence within agreed timelines.
• Maintain an audit request and evidence tracker to monitor outstanding requirements and submission status.
• Assist in responding to audit observations, findings, and requests for clarification.
• Support the preparation and maintenance of management responses and remediation plans for identified findings.
• Monitor commitments arising from audits and assessments until closure.
• Assist in maintaining organizational readiness for regulatory inspections and compliance assessments.

Training and Awareness

• Assist in developing and coordinating compliance, data privacy, data protection, and SOC 2 awareness activities.
• Support the preparation of training materials, presentations, communications, FAQs, and awareness campaigns.
• Monitor completion of assigned compliance and security training programs.
• Assist in maintaining training and awareness records for audit and compliance purposes.
• Promote awareness of data protection, information security, internal controls, and compliance responsibilities across the organization.

Reporting and Continuous Improvement

• Prepare periodic compliance reports, dashboards, trackers, and management updates covering control status, audit readiness, identified gaps, remediation activities, and other compliance metrics.
• Analyze compliance data and identify recurring gaps, trends, overdue actions, and areas requiring management attention.
• Provide recommendations for improving the efficiency and sustainability of compliance processes and controls.
• Support continuous improvement initiatives designed to strengthen the Company's overall governance, risk, compliance, data management, and control environment.
• Maintain confidentiality of all compliance, audit, security, personal, customer, employee, and business information accessed during the performance of duties.
• Perform other duties and responsibilities as may be assigned.

Qualifications:

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Business Administration, Compliance, Risk Management, Data Management, or a related field.
• Certification or formal training in SOC 2, information security, data privacy, risk management, internal audit, or compliance is an advantage.
• Knowledge of SOC 2 Trust Services Criteria and common information security and compliance controls is an advantage.
• Knowledge of the Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations is an advantage.
• Familiarity with ISO/IEC 27001, or other governance and information security frameworks is an advantage.
• Familiarity with audit, risk assessment, control testing, data governance, or compliance management processes is an advantage.
• At least two (2) years of relevant professional experience in compliance, data governance, information security, internal audit, risk management, data privacy, quality management, or a related field; experience in a BPO or shared-services environment is an advantage.
• Working knowledge of SOC 2 compliance requirements, internal controls, audit evidence, and control documentation.
• Experience in maintaining compliance trackers, evidence repositories, audit documentation, or risk and action-plan registers.
• Strong documentation and records management skills with high attention to detail.
• Strong analytical and problem-solving skills, with the ability to identify gaps and determine appropriate follow-up actions.
• Ability to coordinate effectively with multiple departments and process owners to obtain information, evidence, and action-plan commitments.
• Ability to interpret policies, standards, procedures, contractual requirements, and regulatory requirements and translate them into practical compliance activities.
• Strong written and verbal communication skills.
• Proficient in Microsoft Office or equivalent productivity tools, particularly Excel, Word, PowerPoint, and document management platforms.
• Experience with SharePoint, compliance management systems, ticketing systems, workflow tools, or project management platforms is an advantage.
• Demonstrates integrity, discretion, accountability, and appropriate handling of confidential and sensitive information.
• Able to work independently while maintaining effective coordination with internal stakeholders.
• Amenable to a hybrid work arrangement and coordination with multiple sites, departments, and external parties.
• Willing to work on a mid-shift schedule, with occasional night shifts during audit schedules.