GRC Analyst II — Remote with SOC 2 & Data Security Focus

Payscale; Philippines; Remote; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Remote‑first culture

Learning & development

Remote work stipend

Volunteer hours

Job summary

Payscale is seeking a GRC Analyst II to join our Information Security Team, reporting to the Manager of GRC. In this role, you will take on broader ownership of core GRC program areas while supporting senior‑level initiatives across risk, audit, and compliance.

The ideal candidate brings hands‑on GRC experience, strong communication skills, and the ability to operate independently across technical and business stakeholders to drive compliance and risk outcomes.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, or a related field.
• 2–4 years of work experience in GRC, information security, or a related field in a SaaS or software company.
• Working knowledge of SOC 2, ISO 27001, NIST 800-53, or CIS.
• Experience with data classification frameworks and data governance concepts.
• Experience conducting vendor security assessments and managing third‑party risk workflows.
• Hands‑on experience with audit support activities (SOC 2 or similar).
• Knowledge of information security policies, standards, and procedures.
• Hands‑on experience with GRC tools (Drata, ServiceNow GRC, or similar).

Responsibilities

• Maintain Payscale’s data classification program, including schema and tagging standards.
• Maintain system classification and ownership inventory with defined cadence.
• Support audit coordination activities for SOC 2 and other frameworks.
• Conduct vendor security assessments.
• Manage policy management lifecycle, including drafting and approvals.
• Identify control gaps and work with business units to improve controls.

Skills

GRC experience

Security governance

Data classification

Vendor security assessments

Audit support

ISO 27001 / SOC 2 familiarity

Communication

Education

Bachelor's degree in cybersecurity or related field

Tools

Drata

ServiceNow GRC

Job description

Payscale is seeking a GRC Analyst II to join our Information Security Team, reporting to the Manager of GRC. In this role, you will take on broader ownership of core GRC program areas while supporting senior‑level initiatives across risk, audit, and compliance.

The ideal candidate brings hands‑on GRC experience, strong communication skills, and the ability to operate independently across technical and business stakeholders to drive compliance and risk outcomes.