GRC Specialist

Basic Functions

The GRC Specialist is responsible for supporting the design, implementation, and monitoring of the company's governance, risk, and compliance framework. The role ensures that the organization operates in line with internal policies, industry regulations (including BSP, AMLC, and data privacy laws), and international best practices. The position involves policy development, risk assessments, compliance monitoring, and providing advisory support across departments.

Essential Duties and ResponsibilitiesGovernance

• Assist in developing and updating company policies, procedures, and controls in alignment with regulatory requirements and internal standards.
• Support the GRC team in conducting awareness and training sessions across the organization.
• Ensure compliance reporting is accurate, timely, and properly communicated to management.

Risk Management

• Conduct periodic risk assessments to identify operational, financial, IT, and compliance risks.
• Monitor risk mitigation plans and ensure follow-ups with responsible stakeholders.
• Assist in maintaining the enterprise risk register and risk dashboards.
• Coordinate with internal and external auditors for reviews and remediation.

Compliance

• Monitor compliance with BSP, AMLC, SEC, NPC, and other regulatory requirements relevant to fintech and EMI.
• Assist in regulatory submissions, audits, and inspections.
• Conduct compliance testing and monitoring activities across business units.
• Support the review and validation of new products, processes, and partnerships to ensure compliance alignment.
• Stay updated on regulatory developments and advise business units on implications.

Job RequirementsTechnical / Industry Knowledge

• At least 3–5 years of experience in Governance, Risk, and/or Compliance roles, preferably in fintech, EMI, banking, or financial services.
• Solid understanding of BSP regulations, AMLC guidelines, Data Privacy Act, and relevant compliance frameworks.
• Familiarity with enterprise risk management tools and methodologies.
• Knowledge of ISO standards (e.g., ISO 27001, ISO is an advantage.
• Strong documentation, policy drafting, and reporting skills.

Soft Skills

• Analytical and detail-oriented with problem-solving ability.
• Strong communication skills to interact with regulators, auditors, and internal stakeholders.
• Ability to work independently while collaborating with cross-functional teams.
• Ethical, objective, and committed to confidentiality and integrity.

Educational Requirements

• Bachelor's Degree in Law, Business Administration, Finance, Accountancy, IT, or related field.
• Professional certifications (e.g., CCO, CAMS, CRISC, CISA, ISO Lead Implementer) are an advantage.

Job Summary

As a GRC Specialist, you will play a vital role in strengthening the organization's governance, risk, and compliance posture. You will work closely with leadership and cross-functional teams to ensure operational resilience, regulatory compliance, and effective risk management in a fast-evolving fintech and EMI environment.

Job Type: Full-time

Pay: From Php35,000.00 per month

Work Location: In person