Compliance GRC Specialist

Job Title: GRC Specialist

Department: Compliance

Reporting to: Head of Compliance / Compliance Manager

Industry: EMI (Electronic Money Institution) / FinTech

Work Setup: [Specify – e.g., Hybrid / Onsite / Remote]

Location: [City, Country]

Position Overview

The GRC Specialist will be responsible for implementing, monitoring, and enhancing the company's Governance, Risk, and Compliance framework. The role ensures that all operations, systems, and processes align with regulatory requirements (BSP, AMLC, PCI DSS, ISO standards), internal policies, and quality management systems (QMS).

This position plays a key role in strengthening internal controls, supporting audits, maintaining compliance documentation, and ensuring continuous improvement across business units.

Key ResponsibilitiesGovernance

• Support the development and maintenance of governance frameworks, policies, and procedures aligned with regulatory and business objectives.
• Coordinate policy reviews and updates across departments to ensure consistency and compliance with internal controls and QMS standards.
• Assist in preparing reports for management and regulatory bodies, ensuring accurate and timely submissions.

Risk Management

• Conduct risk assessments, identify emerging risks, and ensure appropriate risk mitigation measures are in place.
• Maintain and update the enterprise risk register and track mitigation actions.
• Support business continuity planning, incident reporting, and operational risk reviews.

Compliance

• Monitor compliance with regulatory requirements (BSP, AMLC, Data Privacy Act, PCI DSS, ISO 27001, and other applicable frameworks).
• Conduct periodic internal compliance audits and ensure timely closure of audit findings.
• Assist in managing external and internal audits, ensuring required evidence and documentation are complete and accurate.
• Implement and track corrective and preventive actions (CAPA) under QMS and compliance programs.
• Develop compliance awareness programs, training materials, and workshops for employees.

Quality Management System (QMS)

• Maintain and improve QMS documentation in alignment with ISO 9001 and related standards.
• Conduct internal quality audits, monitor KPIs, and ensure compliance with established QMS procedures.
• Support management reviews, quality objectives, and continuous improvement initiatives.
• Ensure document control, version tracking, and record management meet QMS requirements.

Qualifications

Education:

• Bachelor's degree in Business Administration, Accounting, Finance, Information Systems, or any related field.
• Professional certifications in GRC, ISO (e.g., ISO 9001, ISO 27001 Lead Auditor), Risk Management, or Compliance are preferred.

Experience:

• Minimum of 3–5 years experience in GRC, Compliance, Audit, or Risk functions within EMI, FinTech, Banking, or Financial Services industry.
• Experience with BSP-regulated institutions and understanding of AMLC guidelines is highly desirable.
• Familiarity with ISO standards (ISO 9001, ISO 27001, ISO and QMS implementation is an advantage.

Technical Skills:

• Strong knowledge of compliance management frameworks, internal controls, and QMS principles.
• Proficient in using GRC and documentation management tools (e.g., Jira, Confluence, Power BI).
• Excellent report writing, documentation, and analytical skills.
• Strong understanding of operational, IT, and regulatory risks in FinTech/EMI environments.

Behavioral Competencies:

• High attention to detail and organizational discipline.
• Strong ethical standards and integrity.
• Ability to communicate effectively across departments.
• Proactive and solution-oriented mindset.
• Ability to manage multiple compliance tasks under tight deadlines.

Job Type: Full-time

Pay: Php30, Php35,000.00 per month

Work Location: In person