I am an operations and compliance-focused Virtual Assistant with more than 15 years of experience building organized, audit-ready systems for service-based and regulated businesses.
I specialize in process documentation, SOP development, document control, records management, data privacy workflows, and compliance program support. I turn unclear or fragmented processes into practical, repeatable workflows.
I have led privacy, risk, and compliance initiatives across BPO, healthcare, legal, hospitality, and client-service environments. My work includes ISO 27001, SOC 2 Type II, GDPR, CCPA/CPRA, HIPAA, PCI DSS, and Philippine data privacy compliance.
I am experienced in training design and facilitation, internal auditing, incident investigation, privacy impact assessments, consent tracking, DSAR handling, and risk remediation planning. I communicate complex requirements in clear, usable documentation and training materials.
I also provide creative production support through publication layout, media kits, advertising design, marketing collateral, and image enhancement. I work independently, manage recurring deliverables, and maintain quality and brand consistency in remote environments.
I guide organizations through ISO 27001 implementation and certification-readiness activities, including support for a third-party background verification company.
I facilitate ISO 27001 Internal Auditing and Document Control & Records Management courses, helping teams understand and apply compliance requirements in day-to-day operations.
I produce publication layouts, media kits, and advertisements for a hospitality-focused publisher in a fully remote capacity.
I translate creative briefs and advertiser materials into production-ready, on-brand designs. I manage recurring assignments from briefing through final delivery while maintaining consistency and quality across publication cycles.
I assessed QA and operations processes across client accounts to identify fraud, compliance, and privacy gaps against ISO 27001, PCI DSS, and data privacy requirements.
I designed and delivered fraud prevention and compliance training for QA and operations teams. I also provided process improvement plans, sustainability recommendations, final reporting, and guidance for risk management policies, guidelines, and frameworks.
I led the company-wide SOC 2 Type II certification program from 2021 through 2025, achieving year-on-year certification. I trained more than 1,200 US and Philippine employees on GDPR, CCPA/CPRA, and anti-corruption policies, achieving high completion and assessment pass rates.
As Data Protection Officer from 2017 to 2023, I built consent tracking and data subject request workflows with zero consent violations and zero DSAR non-compliance. I documented privacy procedures, conducted privacy impact assessments, managed privacy and compliance incidents, and implemented preventive controls and remediation plans.
I led internal audits and risk assessments through closure of identified compliance gaps. I maintained compliance with ISO 27001, HIPAA, PCI DSS, ISO 13485, SSAE 16, and client contractual requirements.
I tested and refined business continuity and disaster recovery plans, investigated security incidents, and delivered evidence-based recommendations to strengthen operational and compliance controls.
I led the Net Promoter Score initiative to improve client satisfaction and retention.
I drove process-improvement initiatives, including a 5S workplace organization program and automated reporting workflows.
I supported program scale-up from 40 to 220 representatives while maintaining performance targets. I held progressive roles in technical support, quality assurance, and quality team leadership.
I reduced customer satisfaction variance by 15% through predictive performance models and improved agent retention by 5% through process and skills training.
Bachelor of Science, Medical Technology
Bachelor of Science in Medical Technology.
This professional hasn’t added portfolio projects yet.
This professional hasn’t listed any services yet.