junior Compliance officer | permanent | fulltimeEastvantage Business Solutions Inc.

Job Description
About the role:
Must serve as a catalyst of change, an interface between different departments and a reporter of fact to confirm that Eastvantage's documentation meets requirements and that day-to-day operations follow the documentation.
Conduct activities to maintain Eastvantage international certifications on ISO 27001 and PCI DSS, and ensures strict compliance with Philippines Data Privacy Act (DPA) of 2012 and European Union General Data Protection Regulation (GDPR).
Act as the Data Protection Officer (DPO) for the company, in compliance with the Philippines DPA of 2012 or R.A. 10173.
Prepares the documentation requirements and facilitates the registration of the company with the National Privacy Commission (NPC).
Assist in the creation of an annual audit programme and conduct internal audits at least twice a year, or as planned or as advised by the top management, by preparing the audit plan, audit checklists and conducting audits accordingly.
Monitor and assist in the planning and implementation of preventive and corrective action plans in line with the identified process improvement or audit findings.
Prepare and distribute reports to the Compliance Manager, Top Management and other relevant stakeholders.
Strengthen stakeholders and client relationships through constant communication and feedback, consultative meetings and other engagement activities.
Assisting the department Process Champion(s) in the documentation of processes and control points.
Conducts gap assessment and root-cause analysis for problem solving, timely resolution and communicating potential issues to his/her manager.
Monitors compliance with regulations and controls by examining and analyzing records, reports, operating practices and procedures, and documentation.
Analyzing and assessing information obtained through interviews, observations and inspections.
Adheres to all regulatory and privacy policies, requirements, and standards in maintaining compliance with ISO, PCI DSS, DPA and GDPR.
Perform other duties and tasks that may be assigned by his/her manager or top management that will further the interest of information security and data protection.
Position requirements:
Job Requirements
At least 3 years professional experience in internal audit and compliance roles or any related field.
Familiarity with the applicable laws and policies in relation to the information security controls and data protection requirements.
Knowledge in information security and data protection best practices.
Understanding of the concepts of continual improvement (system improvement).
Experience in internal/process auditing, ISO certification and ISO standards.
Critical thinking, responsiveness, perseverance, and resourcefulness in case of a breach.
Excellent and effective verbal, written, interpersonal communication and presentation skills.
Possess strong analytical and problem solving abilities, must be independent and proactive.
Attended ISO-related training(s) and holds ISO certification as a PLUS.
Must be keen on details and highly organized.
Must have a strong sense of professionalism.