Home-Based DCX Risk and Compliance Analyst at DCX PH

It's fun to work in a company where people truly BELIEVE in what they're doing!

We're committed to bringing passion and customer focus to the business.

Number of Openings: 1

The DCX Risk & Compliance Analyst supports the execution and continuous improvement of the DCX Governance, Risk, and Compliance program. The role focuses on risk assessments and compliance monitoring, audit support, and awareness activities, ensuring that DCX systems, processes, and teams align with applicable regulatory requirements and industry standards.

This role strengthens DCX’s ability to identify risk early, maintain compliance readiness, and scale GRC support across departments.

REQUIRED CORE COMPETENCIES

• Risk Identification & Assessment - Proactively identifies, evaluates, and prioritizes risks across systems, vendors, and processes. Maintains an accurate risk register with clear mitigation plans and monitors organizational changes for emerging risks.

• Regulatory & Framework Compliance - Applies requirements under NIST CSF, SOC 2, ISO/IEC 27001, and the Data Privacy Act with consistency. Supports audit activities by collecting evidence in a timely manner and following up on remediation findings.

• Analytical Thinking & Attention to Detail - Assesses controls, interprets compliance data, and identifies gaps in documentation with a high degree of accuracy. Translates complex risk information into clear, actionable insights for stakeholders.

• Cross-Functional Collaboration - Builds effective working relationships across departments and communicates risk and compliance requirements in a way that is accessible to non-technical audiences. Provides practical, solution-oriented GRC guidance.

• GRC Reporting & Communication - Prepares concise, leadership-ready GRC reports and tracks key program metrics and trends. Supports security awareness campaigns with well-organized and engaging materials.

WHAT YOU WILL DO

Risk & Compliance Operations

• Serve as a primary point of contact for risk assessments related to DCX systems, tools, and processes

• Conduct risk assessments, including third-party and vendor reviews

• Maintain and update the risk register, mitigation plans, and risk status tracking

• Monitor organizational and system changes to identify emerging risks

Audit & Regulatory Support

• Support internal and external audits (e.g., NIST, SOC2) through evidence collection and reporting, and maintain compliance alignment with:

  • NIST Cybersecurity Framework

  • SOC2

  • ISO/IEC 27001

• Data Privacy Act and applicable privacy regulations.

• Track audit findings and follow up on remediation activities.

Awareness & Reporting

• Support employee risk and security awareness initiatives, including training compliance and campaigns.

• Track and report GRC KPIs, metrics, and trends.

• Prepare monthly GRC summary reports for leadership.

Cross-Functional Support

• Collaborate with other departments to provide GRC advisory and consultation services.

• Extend GRC support to other departments by assisting with process risk reviews and compliance guidance

Performs other tasks analogous to the foregoing.

WHAT WE LOOK FOR

• Education: Bachelor’s degree in computer science, information technology, engineering, business, or any related field.

• Experience: At least three (3) years of experience in Governance, Risk, and Compliance or a related role. With hands-on experience with risk assessments, audits, or compliance programs. Experience in supporting or auditing frameworks such as NIST Cybersecurity Framework, SOC2, and ISO/IEC 27001. Experience in the IT Services or BPO industry is an advantage.

• Certifications & Licenses: No certifications required. However, a certification in system auditing is a plus.

• Language Proficiency: Excellent verbal, written, and English communication skills.

• Technical Skills: Proficient in both Microsoft and Google applications.

• Industry-Specific Software/Knowledge: Preferably experienced in the BPO industry.

WHAT WE OFFER

• Salary Range: PHP 50,000 - PHP 60,000

• Industry: Business Process Outsourcing

• Job Type: Full-time

• Work Shift: 8:00 AM – 5:00 PM (CST)

• Workdays: Monday through Friday (CST)

BENEFITS OF WORKING WITH US

• Industry-leading salary packages

• Permanent work-from-home setup

• Company equipment provided

• Internet stipends upon regularization

• HMO Coverage

• PTO credits and service incentive leaves

• Major spring and winter company live events

• Monthly employee appreciation virtual events

• Company-provided career skills training courses

• A company culture focused on your personal and professional growth

WHO WE ARE

DCX stands out as a leading BPO (Business Process Outsourcing) company that takes pride in assisting growth-focused small and medium-sized businesses across the United States to discover the perfect global talent to enhance their teams.

At DCX, our core beliefs center around fostering growth and making hiring easy. We are dedicated to helping business owners, executives, and industry leaders, primarily within the promotional products industry, in their search for superstar team members.

If you are looking for a company that values growth and strongly emphasizes its people-centered culture, DCX is the place for you. As we say around here, LET'S GROW!

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!