GRC Analyst - Remote Data & Compliance Champion

AS White Global; Manila; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Remote work

Healthcare coverage

Annual learning budget

Career development opportunities

Job summary

AS White Global is seeking an experienced GRC Analyst to support audit readiness and strengthen our information security program. You will partner with stakeholders in Australia and APAC, automate evidence collection, and maintain controls across the organisation.

You will review vendor responses, manage risk registers, and support ISO 27001 and NIST compliance activities in a fully remote setup from the Philippines.

Qualifications

• 3+ years in GRC or related role.
• Hands-on GRC, IT audit, IT assurance, or cybersecurity compliance experience.
• Strong ISO 27001 understanding; NIST knowledge preferred.
• Experience with vendor assessments and third-party risk management.
• IAM concepts including access reviews and IT general controls.
• Clear written communication and proactive ownership.

Responsibilities

• Assist audits: third-party, customer, internal, and external audits.
• Review vendor responses and assess security/compliance posture.
• Respond to audit requests with evidence gathering and validation.
• Collaborate with business, technology, cybersecurity, and control owners to collect information.
• Maintain control library, risk register, and audit evidence records.
• Support SOP hygiene security audits including user access reviews.
• Work across brands according to audit and risk priorities.
• Use UpGuard for vendor assessments and OneUp for audit questionnaires.

Skills

GRC Analyst

IT Audit

ISO 27001

NIST

Vendor risk

IAM

Written communication

Tools

UpGuard

OneUp

Job description

AS White Global is seeking an experienced GRC Analyst to support audit readiness and strengthen our information security program. You will partner with stakeholders in Australia and APAC, automate evidence collection, and maintain controls across the organisation.

You will review vendor responses, manage risk registers, and support ISO 27001 and NIST compliance activities in a fully remote setup from the Philippines.