GRC Analyst — Drive Policy, Risk & Compliance Impact

MyPass Global; Compostela; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Healthcare Insurance

Wellbeing policy

Paid Time Off

Job summary

MyPass Global in Cebu City, Philippines, is seeking a GRC Analyst to manage policy, risk, CAPA, and third‑party registers within our ISMS framework. You will coordinate cross‑functional reviews, maintain evidence in Drata and Jira, and support ISO 27001 audits.

This role requires meticulous documentation in Confluence and Google Workspace, plus proactive stakeholder coordination to meet deadlines and drive continual compliance improvements.

Qualifications

• Experience in GRC, risk, or compliance roles.
• Experience managing multiple compliance registers (policy, risk, CAPA).
• Experience with GRC platforms like Drata, including evidence management.
• Audit and CAPA support experience.
• Stakeholder coordination without direct authority.
• Experience using Jira for issue tracking.
• Familiarity with Confluence for SOPs.
• Strong attention to detail and problem solving.

Responsibilities

• Policy Register Management: monitor lifecycle and deadlines.
• Coordinate policy reviews and publish in Confluence and Drata.
• Maintain controlled document registers and templates.
• Support risk register reviews and evidence with stakeholders.
• Oversee Drata control readiness and raise remediation tickets.
• Manage third-party provider registers and vendor due diligence.
• Maintain CAPA register and evidence for audits.
• Support KnowBe4 training campaigns rollout.
• Conduct system access reviews and Google Workspace guidance.
• Provide project support and document SOPs.
• Support ISO 27001 audits and ISMS documentation.

Skills

GRC experience

Risk management

Compliance expertise

Stakeholder coordination

Detail oriented

Analytical thinking

Tools

Drata

Jira

Confluence

Google Workspace

QT9

Job description

MyPass Global in Cebu City, Philippines, is seeking a GRC Analyst to manage policy, risk, CAPA, and third‑party registers within our ISMS framework. You will coordinate cross‑functional reviews, maintain evidence in Drata and Jira, and support ISO 27001 audits.

This role requires meticulous documentation in Confluence and Google Workspace, plus proactive stakeholder coordination to meet deadlines and drive continual compliance improvements.