GRC Analyst

Audinate; Taguig; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Audinate is seeking a Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team. You will help continuously improve our risk and compliance function to maintain ISO27001 certification and support broader security assurance needs.

The ideal candidate has experience with ISO27001:2022, risk assessments, third-party security assessments, internal audits, and managing a GRC platform.

Qualifications

• Bachelor’s degree or industry certifications in information cybersecurity, risk management, governance, or a related field.
• 5+ years of direct experience in information security with an emphasis on governance, risk and compliance.
• 3+ years of experience preparing for ISO27001 audits, and working with auditors.
• Thorough understanding of ISO27001:2022 standard and guidelines.
• Experience with GRC Platforms such as ISMS.online, Vanta, SecureFrame or similar.
• Interpersonal skills to work with developers, engineers, business and operations & external stakeholders.
• Relevant certifications such as CISA, CISSP or CRISC are a plus.

Responsibilities

• Conduct risk assessments and third-party security assessments to identify gaps against ISMS policies and controls.
• Design, implement, and conduct internal audits and report audit findings to management.
• Manage and maintain a GRC platform to track and report on compliance activities.
• Work closely with ISO27001 auditors to ensure successful audits and certification.
• Own the risk assessment process including maintaining risk, information asset, and incident registers.
• Monitor emerging product compliance legislation and standards and translate obligations into requirements for Engineering, Legal and Operations.
• Collaborate with cross-functional teams to address compliance issues and drive continuous improvement.
• Stay up to date on the latest regulations, standards and trends in risk and compliance.

Skills

Interpersonal skills

Agile mindset

Team collaboration

Education

Bachelor's degree

Industry certifications

Tools

ISMS.online

Vanta

SecureFrame

Job description

Job Description:

Find Your Connection to Endless Possibilities

Are you a GRC professional looking for the next step in your career? If the opportunity to work in a global industry leader with a diverse culture excites you, this may be the role for you.

With Audinate, you’ll find your connection to the world of sound and vision.

We lead the world in AV networking media to pioneer the way people see and hear. Our products seamlessly manage hundreds of audio and video channels with one network, making us the industry standard. You’ll find us in the largest companies and institutions like the Sydney Opera House, NFL Media Headquarters, Microsoft, and even a 900-year old cathedral featured in Harry Potter.

Our core values are the foundation of everything we do: Excellence, Courage, Integrity, Innovation, and Teamwork.

If this resonates with you, this is the place for you.

What you’ll experience with us

No matter your role, you’ll feel part of our team and contribute to pioneering the future of AV so that everyone can be seen and heard. In addition to a competitive salary, annual bonus and equity incentive plan you’ll be part of our diverse, values-based culture. You’ll also enjoy a range of benefits such as flexible working (2 days per week in office), home office support, and volunteering leave.

Who we're looking for

We are seeking a Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team. You will help Audinate, and the Cybersecurity team, continuously improve our risk and compliance function to ensure ongoing ISO27001 certification, while also supporting broader security assurance needs.

The ideal candidate will have experience with the ISO27001:2022 standard, risk assessments, third-party security assessments, internal audits, working with external auditors, and managing a GRC platform.

Responsibilities

• Conduct risk assessments and third-party security assessments to identify potential gaps and vulnerabilities against ISMS policies, guidelines and associated controls.
• Design, implement, and conduct internal audits and report audit findings to management.
• Manage and maintain a GRC platform to track and report on compliance activities.
• Work closely with ISO27001 auditors to ensure successful audits and certification.
• Own the risk assessment process including maintaining the risk register, information asset register, and incident register.
• Monitor emerging and evolving product compliance legislation (e.g. EU AI Act, Cyber Resilience Act, Radio Equipment Directive) and standards, assess applicability and impact on Audinate's products and platforms, and translate obligations into requirements for Engineering, Product, Legal and Operations.
• Collaborate with cross-functional teams to address compliance issues and drive continuous improvement efforts
• Stay up to date on the latest regulations, standards and trends in risk and compliance.

Requirements

• Bachelor’s degree or industry certifications in information cybersecurity, risk management, governance, or a related field.
• 5+ years of direct experience in information security, with an emphasis on governance, risk and compliance.
• 3+ years of experience preparing for ISO27001 audits, as well as working with auditors to prepare audit responses.
• Thorough understanding of the ISO27001:2022 standard and associated guidelines.
• Experience with GRC Platforms such as ISMS.online, Vanta, SecureFrame or similar.
• Interpersonal skills (working with developers, engineers, business and operations & external stakeholders)
• Relevant certifications such as CISA, CISSP or CRISC are a plus.
• Ability to work independently and as part of a team
• Agile mentality: flexible, open to change and striving for continuous improvement