SUMMARY OF JOB DESCRIPTION
The Compliance Manager assumes a pivotal role, ensuring the security of the company’s information and adherence to security policies, regulatory requirements, and industry standards. Responsibilities encompass managing PCI DSS compliance, conducting risk assessments and mitigation of potential risks, as well as overseeing compliance initiatives. Collaborating with cross-functional teams, this person shall align security strategies with business objectives, fostering a culture of heightened security awareness. The candidate should have a good grasp of information security and risk management concepts and must be able to correlate these to the needs of the company. Being able to communicate effectively with business and technical people and having a robust understanding of the business, fintech industry, and its regulatory requirements is vital to this role.
JOB DESCRIPTION:
Set the information security and compliance strategy roadmap and align with the overall business strategy and objectives
Establish, maintain and implement information security policies, procedures and guidelines
Monitor and manage PCI DSS compliance by ensuring timely resolution of issues and completion of all necessary activities
Liaise with the auditors/PCI QSA and internal teams during audits and gather evidence
Ensure compliance with regulations under BSP, data privacy and payment carda brands
Maintain an information security awareness program which include conducting information security trainings and awareness campaigns within the company
Monitor the company’s cybersecurity risk profile by performing risk assessments and recommending appropriate mitigation measures
Monitor for potential security incidents and participate in the incident response
Stay updated on the latest security threats and vulnerabilities and ensure that the internal network and applications are secured
Advise the management and be the focal point of concerns regarding information security and data privacy
Provide support in projects and other security endeavors from time to time
- EDUCATION Bachelor's degree in IT or related field (e.g. Information Management, Computer Science, Accounting, or equivalent)3-5 years of experience in cybersecurity, GRC (Governance, Risk and Compliance) or IT auditing, preferably with 2 years in a managerial or supervisory roleBackground on the fintech or banking sector with solid understanding of relevant regulations under the BSP, AML, payment card industry and the Philippine Data Privacy ActEXPERIENCEComprehensive knowledge on PCI DSS requirements and has direct experience on managing or assisting in PCI DSS auditsKnowledgeable on various security/risk management standards and frameworks (e.g., ISO 27001/31000, NIST CSF) and performing risk assessmentsKnowledge or experience in management of security functions including network security, application security, vulnerability management, incident response, disaster recovery, etc.Excellent oral and written communication skillsStrong analytical and problem-solving skillsIT security certifications and trainings (e.g. CISSP, CISA, CISM, PCI DSS, CPISI, etc.) an advantage, but not mandatory.
