IT Security & Systems Compliance Specialist

As an IT Security & Systems Compliance Specialist at coins.ph, you support the IT Compliance Officer in executing and monitoring IT security and systems compliance activities. You work across access governance, IT General Controls (ITGC), critical systems, compliance tools, vendor compliance, regulatory requirements, and audit activities. coins.ph is the most established crypto brand in the Philippines with over 18 million users, fully regulated by the Bangko Sentral ng Pilipinas (BSP), and the first crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank.

What you'll do

• Support compliance with applicable IT-related regulatory requirements and maintain supporting documentation and trackers
• Perform IT security, access governance, and ITGC reviews for critical systems
• Conduct compliance reviews of critical systems and compliance technology, including payment, wallet/custody, AML/CFT, screening, and Travel Rule systems
• Support technology projects, system changes, and implementations by validating compliance and control requirements
• Perform IT vendor and third-party compliance assessments and monitor remediation
• Support AML/CFT and VASP technology controls through system, access, configuration, and audit-trail reviews
• Support BSP/AMLC examinations, audits, and remediation activities through evidence preparation, documentation, and issue tracking

What you bring

• A bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, Business, Finance, or a related field
• At least 2 years of hands-on experience in IT Compliance, IT Risk, IT Audit, Information Security Governance, Technology Risk, or a related function
• Prior experience performing IT compliance activities, preferably within banking, fintech, payments, e-money, VASP, or another regulated environment
• Hands-on experience with ITGC, access reviews, IT security controls, vendor due diligence, audit evidence, and remediation tracking
• Experience supporting regulatory examinations, internal/external audits, or compliance assessments
• Familiarity with BSP regulatory requirements and technology-related regulatory controls
• Working knowledge of IT General Controls (ITGC), IT security, access governance, and technology risk management
• Knowledge of BSP, AMLC, NPC, and other applicable regulatory requirements
• Familiarity with VASP, AML/CFT, transaction monitoring, sanctions/wallet screening, Travel Rule, blockchain analytics, and custody technology
• Knowledge of ISO 27001, NIST, COBIT, SOC 1/SOC 2, or similar frameworks
• Proficiency in SQL and data analysis for validating system data, transaction records, compliance controls, audit trails, and regulatory reports
• Ability to analyze system configurations, data flows, interfaces, logs, and control evidence
• Strong analytical, problem-solving, documentation, communication, and stakeholder management skills

Nice to have

• Experience working with GRC, audit, compliance, access governance, or other control-management tools
• Familiarity with GRC, audit, risk, compliance, or access governance platforms

About coins.ph

coins.ph is the most established crypto brand in the Philippines, trusted by over 18 million users. The company is fully regulated by the Bangko Sentral ng Pilipinas (BSP) and was the first crypto-based company in Asia to hold both Virtual Currency and Electronic Money Issuer licenses from a central bank. Through its mobile app, users can buy and sell cryptocurrencies and access a wide range of financial services.