GRC & Compliance Analyst: ISMS, Drata & CAPA

MyPass Global; Cebu City; On-site; PHP 720,000 - 900,000; Full time

Benefits offered by this job

Healthcare Insurance PHP 110,000

Wellbeing policy

Paid Time Off

Team events

Job summary

MyPass Global is seeking a GRC Analyst to ensure the accuracy of policy, risk, and CAPA registers while supporting ISMS ownership and audit obligations. The role collaborates across training campaigns, system access, Google Workspace guidance, and documentation to maintain compliance across platforms.

You will coordinate with stakeholders, manage Drata and Confluence records, and help drive continuous improvement in compliance practices at our Cebu office.

Qualifications

• Experience in GRC, risk, or compliance roles with information security obligations.
• Ability to coordinate multiple registers (policy, risk, CAPA) simultaneously.
• Experience with a GRC platform like Drata or similar, including evidence management.

Responsibilities

• Manage policy lifecycle and publish policies in Confluence and Drata.
• Coordinate risk reviews, evidence, and documentation for risk closure.
• Oversee Drata control readiness and manage remediation tickets in Jira.
• Maintain third‑party provider register and renewals evidence.
• Own CAPA register and end‑to‑end CAPA workflows; support internal audits.
• Support KnowBe4 training campaigns and training reports.
• Coordinate system access reviews and remediation.
• Provide Google Workspace guidance and shared drive structure input.
• Support corporate projects and document SOPs in Confluence.

Skills

GRC and compliance

Risk management

Regulatory compliance

ISMS/ISO audits

Evidence management

Stakeholder coordination

Audits coordination

Documentation review

Tools

Jira

Confluence

Drata

Google Workspace

Job description

MyPass Global is seeking a GRC Analyst to ensure the accuracy of policy, risk, and CAPA registers while supporting ISMS ownership and audit obligations. The role collaborates across training campaigns, system access, Google Workspace guidance, and documentation to maintain compliance across platforms.

You will coordinate with stakeholders, manage Drata and Confluence records, and help drive continuous improvement in compliance practices at our Cebu office.