risk and Compliance and business continuity managerSupport Services Group

1. PURPOSE
Conducts assessments and analyze potential risks and implement strategies to address risks that may affect the business. Monitor business compliance of the Service Agreements, laws, and regulations. Monitor and ensure employee compliance to the company policies and procedure, laws, and regulation. Create compliance programs consistent with the company policies, procedure, laws, and regulations. Defining any and all risks that can affect the company's operations, making it an important part of the organization's risk management strategy.
2. SCOPE
The scope is confined only to the Business risks and compliance and Business Continuity and Crisis management of SSG APAC,included but not limited to Service Agreement of both existing and new clients.
3. RESPONSIBILITY The following key people are responsible for specific items in enforcing this document:
3.1. Risk and Compliance Manager (RCM) - responsible to carry out the tasks enumerated, described, and furnished in this document.
3.2. Compliance Department Head - responsible for review and recommendation of this document.
3.3. Department Heads - responsible to carry out and address identified risks and ensure compliance on specific items identified and raised by RCM affecting Operations
4. DEFINITION OF TERMS
Risk Management - identification, evaluation, and prioritization of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability or impact of unfortunate events or to maximize the realization of opportunities.
Compliance Management - the process by which managers plan, organise, control, and lead activities that ensure compliance with laws and standards.
Business Continuity Management - is the advance planning and preparation undertaken to ensure that an organization will have the capability to operate its critical business functions during emergency events. Events can include natural disasters, a business crisis, pandemic, workplace violence, or any event that results in a disruption of your business operation
5. DUTIES AND RESPONSIBILITIES
5.1. Risk Management - the forecasting and evaluation of business risks together with the identification of procedures to avoid or minimize their impact. The following are the enumerated responsibilities though not limited to:
5.1.1. Contracts
5.1.1.1. Checks and ensures all campaigns have existing and signed contracts and safe keep the contracts in a secured repository with password protection.
5.1.1.2. Creates a comprehensive masterfile of all campaign contracts of the company.
5.1.1.3. Checks all contracts and identifies the SLAs of each campaign for compliance monitoring.
5.1.1.4. Ensures all ongoing contracts covers all the legal and compliance security of the business.
5.1.1.5. Coordinates with the Legal team to ensure enforceability of all campaign contracts. 5.1.1.6. Shall create a Document Control Process and procedure for Operations in all SSG APAC.
5.2. Compliance Management and Internal Audit
5.2.1. Ensures that all documents in the Operations Department, both Cebu and Manila site, shall adhere to the Document Control Process.
5.2.2. Ensures that operations comply on the Data Security agreement with the clients to prevent fraudulent activities and legal implications.
5.2.3. Ensures that operations comply on the agreed Data Retention and Purging policy of the clients.
5.2.4. Ensures operations follow the proper issue escalation process externally and internally.
5.2.5. Ensures operation fully and properly utilize all technology enablers of the company.
5.2.6. Ensuresthat operations comply to the Information Security Policy ofthe company
5.2.7. Ensures that operations, clients, vendors, and guests comply to the Data Privacy Policy of the company.
5.2.8. Ensures that operation always communicate changes in the facilities and technology to the clients as part of change management process and secure client approval and/or acknowledgement of such changes.
5.2.9. Evaluates all campaign activities relating to compliance, particularly on the policies.
5.2.10. Regularly audits Operation and other Business Units procedures, practices, processes, and documents to identify possible weakness or risks.
5.2.11. Present audits, data and procedure to other teams; advice on compliance issues/risks across the operational board. 5.2.12. Communicates, reviews, and oversees campaign heads on campaign processes' s compliance.
5.2.13. Develop plans for crisis events or compliance violations. 5.2.14. Create correspondences and advisories addressing compliance, privacy, legal, audit, and risk matters.
5.2.15. Coordinates with the Department heads in identifying risks affecting Operations.
5.3. Business Continuity 5.3.1. Leads Corporate wide contingency planning/business continuing efforts
5.3.2. Establishes a framework and methodology of completion of contingency plans by internal business unit
5.3.3. Coordinates training, communication and testing of plans.
5.3.4. Drivers and delivers Business Continuity commitment, support, ownership, accountability and results.
5.3.5. Designs, builds and implement standard Risk Assessment, Business Impact Analysis and Business Continuity tools and capabilities.
5.3.6. Drivers and delivers Business Continuity strategies to support and in time of disaster, recover company's critical business functions
5.3.7. Manages the regular validation and testing of documented Business Continuity plans.
5.3.8. Develops and maintains a business recovery plan and procedure; reviews, revised and expands existing plans and protocols.
5.3.9. Conducts risk assessments for various departments and functions, analyzing potential business impact of unpredictable business interruptions such as natural disasters, security breach, and legal claims
5.3.10. Identifies and implements recovery operations and methods to allow the company to function at limited or partial capacity in the event that part or all of the infrastructure is damaged or destroyed.
Support Services Group

Mandaluyong City, Metro Manila
Permanent
Full-time