GRC Analyst: ISO27001 Risk & Audit Lead (Hybrid)

Audinate; Taguig; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Audinate is seeking a Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team. You will help continuously improve our risk and compliance function to maintain ISO27001 certification and support broader security assurance needs.

The ideal candidate has experience with ISO27001:2022, risk assessments, third-party security assessments, internal audits, and managing a GRC platform.

Qualifications

• Bachelor’s degree or industry certifications in information cybersecurity, risk management, governance, or a related field.
• 5+ years of direct experience in information security with an emphasis on governance, risk and compliance.
• 3+ years of experience preparing for ISO27001 audits, and working with auditors.
• Thorough understanding of ISO27001:2022 standard and guidelines.
• Experience with GRC Platforms such as ISMS.online, Vanta, SecureFrame or similar.
• Interpersonal skills to work with developers, engineers, business and operations & external stakeholders.
• Relevant certifications such as CISA, CISSP or CRISC are a plus.

Responsibilities

• Conduct risk assessments and third-party security assessments to identify gaps against ISMS policies and controls.
• Design, implement, and conduct internal audits and report audit findings to management.
• Manage and maintain a GRC platform to track and report on compliance activities.
• Work closely with ISO27001 auditors to ensure successful audits and certification.
• Own the risk assessment process including maintaining risk, information asset, and incident registers.
• Monitor emerging product compliance legislation and standards and translate obligations into requirements for Engineering, Legal and Operations.
• Collaborate with cross-functional teams to address compliance issues and drive continuous improvement.
• Stay up to date on the latest regulations, standards and trends in risk and compliance.

Skills

Interpersonal skills

Agile mindset

Team collaboration

Education

Bachelor's degree

Industry certifications

Tools

ISMS.online

Vanta

SecureFrame

Job description

Audinate is seeking a Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team. You will help continuously improve our risk and compliance function to maintain ISO27001 certification and support broader security assurance needs.

The ideal candidate has experience with ISO27001:2022, risk assessments, third-party security assessments, internal audits, and managing a GRC platform.