It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.
Number of Openings: 1
The DCX Risk & Compliance Analyst supports the execution and continuous improvement of the DCX Governance, Risk, and Compliance program. The role focuses on risk assessments and compliance monitoring, audit support, and awareness activities, ensuring that DCX systems, processes, and teams align with applicable regulatory requirements and industry standards.
This role strengthens DCX’s ability to identify risk early, maintain compliance readiness, and scale GRC support across departments.
REQUIRED CORE COMPETENCIES
Risk Identification & Assessment - Proactively identifies, evaluates, and prioritizes risks across systems, vendors, and processes. Maintains an accurate risk register with clear mitigation plans and monitors organizational changes for emerging risks.
Regulatory & Framework Compliance - Applies requirements under NIST CSF, SOC 2, ISO/IEC 27001, and the Data Privacy Act with consistency. Supports audit activities by collecting evidence in a timely manner and following up on remediation findings.
Analytical Thinking & Attention to Detail - Assesses controls, interprets compliance data, and identifies gaps in documentation with a high degree of accuracy. Translates complex risk information into clear, actionable insights for stakeholders.
Cross-Functional Collaboration - Builds effective working relationships across departments and communicates risk and compliance requirements in a way that is accessible to non-technical audiences. Provides practical, solution-oriented GRC guidance.
GRC Reporting & Communication - Prepares concise, leadership-ready GRC reports and tracks key program metrics and trends. Supports security awareness campaigns with well-organized and engaging materials.
WHAT YOU WILL DO
Risk & Compliance Operations
Serve as a primary point of contact for risk assessments related to DCX systems, tools, and processes
Conduct risk assessments, including third-party and vendor reviews
Maintain and update the risk register, mitigation plans, and risk status tracking
Monitor organizational and system changes to identify emerging risks
Audit & Regulatory Support
Support internal and external audits (e.g., NIST, SOC2) through evidence collection and reporting, and maintain compliance alignment with:
NIST Cybersecurity Framework
SOC2
ISO/IEC 27001
Data Privacy Act and applicable privacy regulations.
Track audit findings and follow up on remediation activities.
Awareness & Reporting
Support employee risk and security awareness initiatives, including training compliance and campaigns.
Track and report GRC KPIs, metrics, and trends.
Prepare monthly GRC summary reports for leadership.
Cross-Functional Support
Collaborate with other departments to provide GRC advisory and consultation services.
Extend GRC support to other departments by assisting with process risk reviews and compliance guidance
Performs other tasks analogous to the foregoing.
WHAT WE LOOK FOR
Education: Bachelor’s degree in computer science, information technology, engineering, business, or any related field.
Experience: At least three (3) years of experience in Governance, Risk, and Compliance or a related role. With hands-on experience with risk assessments, audits, or compliance programs. Experience in supporting or auditing frameworks such as NIST Cybersecurity Framework, SOC2, and ISO/IEC 27001. Experience in the IT Services or BPO industry is an advantage.
Certifications & Licenses: No certifications required. However, a certification in system auditing is a plus.
Language Proficiency: Excellent verbal, written, and English communication skills.
Technical Skills: Proficient in both Microsoft and Google applications.
Industry-Specific Software/Knowledge: Preferably experienced in the BPO industry.
WHAT WE OFFER
Salary Range: PHP 50,000 - PHP 60,000
Industry: Business Process Outsourcing
Job Type: Full-time
Work Shift: 8:00 AM – 5:00 PM (CST)
Workdays: Monday through Friday (CST)
BENEFITS OF WORKING WITH US
Industry-leading salary packages
Permanent work-from-home setup
Company equipment provided
Internet stipends upon regularization
HMO Coverage
PTO credits and service incentive leaves
Major spring and winter company live events
Monthly employee appreciation virtual events
Company-provided career skills training courses
A company culture focused on your personal and professional growth
WHO WE ARE
DCX stands out as a leading BPO (Business Process Outsourcing) company that takes pride in assisting growth-focused small and medium-sized businesses across the United States to discover the perfect global talent to enhance their teams.
At DCX, our core beliefs center around fostering growth and making hiring easy. We are dedicated to helping business owners, executives, and industry leaders, primarily within the promotional products industry, in their search for superstar team members.
If you are looking for a company that values growth and strongly emphasizes its people-centered culture, DCX is the place for you. As we say around here, LET'S GROW!
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
delegatecx