Compliance Analyst/Officer

Job Summary: The Compliance Analyst / Officer is responsible for ensuring the organization’s adherence to applicable information security standards, statutory regulations, and industry best practices. This role supports the development, implementation, and continuous monitoring of information security policies, audit activities, risk assessments, and compliance reporting to maintain strong data protection and cybersecurity governance across the organization.

Key Responsibilities:

1.       Information Security Compliance:

o   Monitor and ensure compliance with applicable information security standards and frameworks, including SSAE, ISO, WELL, and other relevant regulatory requirements. o Support the implementation, enforcement, and maintenance of information security policies, procedures, and controls. o Ensure alignment of organizational practices with internal security policies and industry standards to effectively mitigate information security risks.

2.       Risk Assessment and Management:

o   Assist in conducting information security risk assessments to identify potential vulnerabilities and exposure. o Collaborate with internal teams to ensure appropriate mitigation strategies and corrective actions are implemented.

o   Track, document, and manage compliance issues, ensuring all remediation efforts are properly recorded and resolved.

3.       Audit and Monitoring:

o   Support internal and external audits by preparing documentation and coordinating audit activities. o Monitor ongoing compliance with legal, regulatory, and contractual information security requirements.

o   Assist in the preparation of audit reports and follow up on audit findings to ensure timely closure.

4.       Incident Management and Response:

o   Support the investigation, documentation, and reporting of information security incidents.

o   Assist in incident response activities, including incident tracking, root cause analysis, and post-incident reporting.

5.       Training and Awareness:

o   Assist in the development and delivery of information security awareness and training programs.  o Promote employee awareness of information security responsibilities, policies, and compliance requirements.

6.       Documentation and Reporting:

o   Maintain and regularly update information security & statutory compliance documentation, including audit records, risk assessments, and compliance reviews. o Assist in preparing compliance reports and presentations for management, auditors, and regulatory authorities as required.

7.       Policy and Procedure Review:

o   Support the periodic review and update of information security policies and procedures to ensure continued alignment with industry standards and regulatory changes. o Assist in ensuring that information security practices support business objectives and compliance obligations.

8.       Collaboration and Communication:

o   Act as a liaison among cross-functional teams (e.g., Facilities Operations, Security, Engineering, Finance) to ensure the consistent implementation of information security policies.  o Clearly communicate information security and compliance requirements to relevant stakeholders across the organization.

9.       Coordination of Statutory Documents o Coordinate with government agencies (e.g., BFP, PEZA) and accredited vendor partners to ensure timely renewal of permits, licenses, and statutory documents.

o   Facilitate and track the renewal of compliance-related documentation across all assigned sites.

Qualifications:

• Bachelor’s Degree in Information Technology, Cybersecurity, Business, or a related field.

• Prior experience in Compliance, Information Security, or Risk Management (1–2 years preferred).

• Familiarity with information security standards and frameworks (e.g., ISO, SSAE, WELL).

• Working knowledge of data privacy regulations and information security frameworks is preferred.

• Experience with compliance management tools and software is an advantage.

• Knowledge of risk assessment methodologies and information security controls is preferred.

• Familiarity with government processes related to permit and document renewals (e.g., BFP, PEZA) is an advantage.

Skills and Competencies:

• Strong understanding of information security principles and practices.

• High attention to detail with strong organizational and documentation skills.

• Analytical thinking with effective problem-solving abilities.

• Strong written and verbal communication skills.

• Proven ability to handle sensitive and confidential information with integrity.

• Ability to work collaboratively with cross-functional teams.

• Proficient in the use of commonly used computer applications and collaboration tools (e.g., MS Office, OneDrive, Outlook, SharePoint).

What we offer

At CBRE GWS IFM PHILS. CORP., we are committed to providing a supportive and rewarding work environment. In addition to a competitive salary, we offer a range of benefits, including performance-based bonuses, comprehensive health insurance, and opportunities for professional development. We also prioritise work-life balance, with flexible working arrangements and generous leave policies.

• Timely salary payments, often a day in advance whenever possible
• Direct and regular employment after a 6-month probationary period
• Annual salary increases
• 13th month pay
• Annual Discretionary Performance Bonuse
• 7 days of paid sick leave (convertible to cash if unused)
• 7 days of paid vacation leave
• Free life insurance coverage from day one (Etiqah, ₱1.5 million coverage)
• Free medical coverage from day one (Intellicare, ₱175,000 per illness per annum)
• Employee Assistance Program which offers all employees and household members access to confidential support resources.
• Extensive company training programs (technical training, safety training, management training, online training via Talent Coach, etc.) for continuous skill enhancement

About us

CBRE GWS IFM PHILS. CORP. is a leading global real estate services firm, providing a full range of services to investors, property owners, occupiers, and developers. With a heritage dating back to 1906, we have a proven track record of delivering exceptional results for our clients. Our company is built on a culture of excellence, innovation, and a commitment to sustainability.

If you are excited about this opportunity and believe you have the necessary skills and experience, we encourage you to apply now.