Compliance Officer

The Compliance Officer will play a key role in ensuring the company's full compliance with relevant regulatory and data privacy requirements in the Philippines. The role primarily focuses on reading, processing, and submitting various documents to the appropriate regulatory bodies, and ensuring timely compliance with all legal obligations. This position will also support internal compliance operations by maintaining robust processes, standards, and documentation related to regulatory filings, and data privacy compliance.

General Responsibilities

• Regulatory Research & Updates: Stay current on changes in local regulations and ensure the company remains compliant with new or revised laws and guidelines.
• Compliance Reporting: Ensure accurate and timely compliance reporting to relevant stakeholders, including the management team and regulatory bodies.
• Audit Support: Assist in preparing for internal and external audits related to compliance, ensuring that all necessary documentation is organized and available for review.
• Continuous Improvement: Actively contribute to process improvements in the compliance function, ensuring greater efficiency, accuracy, and timeliness in managing regulatory requirements

Key Responsibilities

Regulatory Compliance

• Ensure Compliance: Ensure the company's strict adherence to all applicable regulations, including those from Securities and Exchange Commission (SEC), Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), Department of Labor and Employment (DOLE), Intellectual Property Office of the Philippines, Local Government Units (LGUs), Bangko Sentral ng Pilipinas (BSP), and other government bodies.
• Document Processing & Submission: Review, process, and submit regulatory reports and documents to relevant government agencies and institutions promptly.
• Monitor Compliance Deadlines: Keep track of deadlines for regulatory filings and ensure all required submissions are made before due dates to avoid penalties or non-compliance issues.
• Collaborate with Business Units: Work closely with various departments to gather necessary data and documents for reporting and ensure issues are addressed immediately.
• Regulatory Communication: Act as the point of contact for government agencies, ensuring effective communication and the timely resolution of any inquiries or issues.
• Audit Readiness: Maintain proper records of all regulatory documents and filings to support internal and external audits.

Internal Compliance

• Policy and Procedure Enforcement: Establish, implement, and monitor internal compliance policies, standards, and guidelines. Conduct regular reviews to ensure that these policies are up to date and followed across all departments.
• Compliance Audits: Periodically review internal processes and systems to identify areas of improvement in meeting regulatory requirements and reduce the risk of non-compliance.
• Internal Stakeholder Guidance: Provide ongoing compliance support and guidance to various teams, helping them understand the regulatory and legal obligations that affect their daily operations.
• Reporting: Ensure that all internal compliance tasks are completed within agreed timelines and to the highest quality standards. Prepare and present monthly updates to senior management on the status of compliance projects, risks, and regulatory reporting.

Data Privacy Compliance

• Data Privacy Oversight: Ensure 100% compliance with the Data Privacy Act of 2012, overseeing the timely submission of required reports (e.g., data breach notifications, annual privacy reports) to the National Privacy Commission (NPC).
• Policy and Implementation: Oversee the integration of the company's data privacy policies into daily operations. Ensure regular updates and adjustments are made to keep the policies relevant to changes in laws and regulations.
• Third-Party Data Compliance: Review and process data protection/privacy-related clauses in contracts with third-party vendors and service providers. Ensure that all data sharing agreements comply with legal and internal requirements.
• Data Protection Impact Assessments (DPIAs): Conduct DPIAs for new projects or third-party engagements to assess potential data privacy risks and mitigate them before project launches.
• Training & Awareness: Develop and implement a monthly training program on data privacy and security for staff, ensuring 100% participation. Provide ongoing compliance training as required.

Experience

• At least 3 years of experience in regulatory compliance, particularly in the Philippine regulatory environment.
• Knowledge and application of relevant Philippine laws, legal concepts, and regulations
• Familiarity with the regulatory submission processes of government agencies (SEC, BIR, DOLE, etc).
• Knowledge of the Data Privacy Act of 2012 and best practices for data protection. Has the ability to translate legal requirements into pragmatic, company-wide processes and controls.
• Experience in formulating/recommending and implementing policies in compliance, data protection, and data privacy
• Proven track record of engaging with regulators and completing regulatory submissions (SEC i-Register, BIR e-filing, DOLE reporting, etc.)
• Experience working with legal teams and external law firms, especially in areas concerning compliance and data privacy.
• Ability to manage projects (within scope, timeline, and budget) with minimal supervision
• Experience proactively advising leadership and internal teams on compliance risks and recommending solutions that balance regulatory obligations and business objectives.