AI-Enabled Tech GRC Lead: Risk & Compliance

Realpage; Pasig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Realpage is seeking a Senior Technology GRC Advisor to partner with leadership in delivering risk and compliance programs across advisory services, risk registers, and policy governance. You will work with AI-assisted workflows to accelerate evidence gathering and control narratives while ensuring accuracy.

Responsibilities include leading technology risk assessments, advising stakeholders, maintaining the risk register, and performing control testing for SOC 2, PCI DSS, and SOX ITGC programs.

Qualifications

• Bachelor’s degree in IT, cybersecurity, risk management, finance or related field.
• 4+ years in GRC, technology risk, IT audit, or compliance.
• Familiar with NIST CSF 2.0, COBIT 2019, COSO ERM, ISO 31000.
• Experience using AI-assisted tools to draft risk/control content.
• Cloud/hybrid experience with AWS or Azure.

Responsibilities

• Lead or support technology risk assessments and report risk reduction progress.
• Assess SOX ITGCs, SOC 1, SOC 2, PCI DSS, NYDFS control expectations.
• Maintain risk registers and ensure risk ownership and closure.
• Support policy governance, reviews, and exceptions.
• Use AI-assisted workflows to accelerate evidence collection and validation.
• Perform control testing and evidence collection for SOC 2, PCI DSS, SOX.

Skills

Risk assessment

Policy governance

Advisory support

Documentation

Education

Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Finance, or related field

Tools

ServiceNow IRM

AuditBoard

OneTrust

Vanta

Drata

Job description

Realpage is seeking a Senior Technology GRC Advisor to partner with leadership in delivering risk and compliance programs across advisory services, risk registers, and policy governance. You will work with AI-assisted workflows to accelerate evidence gathering and control narratives while ensuring accuracy.

Responsibilities include leading technology risk assessments, advising stakeholders, maintaining the risk register, and performing control testing for SOC 2, PCI DSS, and SOX ITGC programs.