GRC & Compliance Analyst

Seven Seven Global Services, Inc.; Metro Manila; On-site; PHP 420,000 - 780,000; Full time

Job summary

Seven Seven Global Services, Inc. is seeking a GRC & Compliance Analyst to support governance, risk, compliance, information security, and data privacy programs. You will manage controlled documentation, evidence for audits, and reporting, coordinating across departments to ensure audit readiness and robust records.

The role demands strong attention to detail, organization, and the ability to track multiple compliance cycles. Excellent written English and proficiency in MS Office are essential.

Qualifications

• Bachelor’s degree in a related field.
• 2–4 years of compliance, document control, information security, data privacy, quality management, audit support, process documentation, or a related function.
• Excellent documentation and records-management skills.
• Strong attention to detail and accuracy.
• Good written English and business communication.
• Experience with controlled documents, trackers, audit evidence, or compliance records is an advantage.

Responsibilities

• Maintain the organization's controlled-document repository, including policies, procedures, guidelines, standards, templates, and forms.
• Manage document numbering, version control, approval records, effective dates, review dates, and document history.
• Review documents for compliance with approved templates and document-control requirements.
• Track scheduled policy and procedure reviews and follow up with document owners on updates and approvals.
• Maintain ISMS records, compliance trackers, risk registers, exception logs, audit findings, and corrective-action registers.
• Collect, organize, and validate documentary evidence for ISO/IEC 27001, client assessments, internal reviews, and external audits.
• Assist in preparing audit schedules, evidence folders, meeting materials, and follow-up trackers.
• Support the preparation of client security questionnaires, RFP security requirements, and due-diligence requests.
• Maintain privacy-related records, registers, agreements, assessments, and compliance documentation.
• Maintain incident logs, corrective and preventive action trackers, and follow up with assigned owners.

Skills

Documentation

Records management

Attention to detail

Organization

MS Office

Written English

Communication

Confidentiality

Audit support

Education

Bachelor's degree in related field

Tools

Document management systems

Job description

About the role

The GRC & Compliance Analyst supports the organization's Governance, Risk & Compliance, Information Security, Data Privacy, and Process Governance programs through documentation management, compliance tracking, evidence preparation, reporting, and administrative coordination. The role works closely with the GRC Manager – Information Security & Data Privacy and serves as the primary support for controlled documentation, audit readiness, compliance records, action tracking, and recurring governance activities. This is a documentation-intensive role requiring strong attention to detail, organization, follow-through, and the ability to work across multiple departments.

Key responsibilities

• Maintain the organization's controlled-document repository, including policies, procedures, guidelines, standards, templates, and forms
• Manage document numbering, version control, approval records, effective dates, review dates, and document history
• Review documents for compliance with approved templates and document-control requirements
• Track scheduled policy and procedure reviews and follow up with document owners on updates and approvals
• Maintain ISMS records, compliance trackers, risk registers, exception logs, audit findings, and corrective-action registers
• Collect, organize, and validate documentary evidence for ISO/IEC 27001, client assessments, internal reviews, and external audits
• Assist in preparing audit schedules, evidence folders, meeting materials, and follow-up trackers
• Support the preparation of client security questionnaires, RFP security requirements, and due-diligence requests
• Maintain privacy-related records, registers, agreements, assessments, and compliance documentation
• Maintain incident logs, corrective and preventive action trackers, and follow up with assigned owners

About you

• Bachelor's degree in Business Administration, Information Technology, Information Systems, Legal Management, Industrial Engineering, Quality Management, or a related field
• 2–4 years of relevant experience in compliance, document control, information security, data privacy, quality management, audit support, process documentation, or a related function
• Excellent documentation and records-management skills
• Strong attention to detail and accuracy
• Strong organizational and follow-through skills
• Ability to manage multiple trackers, deadlines, and recurring requirements
• Good written English and business communication
• Strong working knowledge of Microsoft Office, particularly Word, Excel, and PowerPoint
• High level of confidentiality and discretion when handling sensitive information
• Experience working with controlled documents, trackers, audit evidence, or compliance records is an advantage