GRC Cybersecurity Analyst

Hire Kaya LLC.; Philippines; Remote; PHP 5,660,000 - 9,434,000; Full time

Job summary

HireKayana is seeking a leadership-track GRC professional to guide US-based client engagements from the Philippines. You will lead governance, risk, and compliance initiatives, working with a vCISO to provide strategic cybersecurity leadership across multiple industries.

Role emphasizes policy development, risk assessment, and client advisory, with a focus on avoiding routine SOC tasks and moving toward leadership in security program oversight. Remote work with global clients.

Qualifications

• Experience in governance, risk, and compliance frameworks.
• Ability to produce clear policy documents and explain concepts to leadership.
• Experience managing internal projects and deadlines.
• High personal and professional ethical standards.

Responsibilities

• Lead internal cybersecurity audits to keep clients' environments compliant and secure.
• Perform quantitative risk assessments to help prioritize security investments.
• Write cybersecurity policy documents for clients.
• Respond to security questionnaires from clients' customers.
• Assist with evidence collection for external audits.
• Advise clients on cybersecurity topics and manage client accounts.
• Plan and run tabletop exercises for incident response.
• Contribute to service development to improve client deliverables.

Skills

2+ years in security role

Strong technical writing

Project management experience

Growth-oriented & collaborative

Education

Bachelor's degree in Cybersecurity or related field

Cybersecurity certifications (SSCP, CompTIA Security+ or similar)

Tools

SIEM

WAF

Vulnerability scanning

Penetration testing

MFA

SSO

Encryption/SSL/TLS

Job description

HireKayana is a talent agency that connects Filipino Remote Professionals with global companies that operate within real systems and value disciplined execution. These are long-term professional roles—not gig work. Our partners build structured teams where accountability, clear communication, and operational discipline matter.

About the Role

Our partner is a US-based cybersecurity consulting firm that provides virtual CISO (vCISO) services. Its clients are typically mid-sized tech firms with real cybersecurity needs but not yet large enough for a full-time CISO. You\'ll work alongside a vCISO to deliver cybersecurity leadership in Governance, Risk, and Compliance (GRC) directly to clients across many industries.

This is a leadership-track GRC role, not a hands-on SOC role. It does not involve routine tasks like monitoring logs, responding to alerts, patching, or running vulnerability scans. If you have technical or SOC experience and want to move toward thoughtful cybersecurity leadership, this is a strong fit.

What You\'ll Do

• Lead internal cybersecurity audits to keep clients\' environments compliant and secure
• Perform quantitative risk assessments so clients can prioritize their security investments

Policy, Documentation & Compliance

• Write cybersecurity policy documents to build up clients\' programs
• Respond to security questionnaires from clients\' customers
• Assist with evidence collection to prepare clients for external compliance audits

Client Advisory & Account Management

• Advise clients across a wide range of cybersecurity topics
• Project manage client accounts to keep them on track
• Plan and run tabletop exercises so clients\' teams can practice incident response

Service Development

• Contribute to the service development program to improve client deliverables

What We\'re Looking For

Non-Negotiables

• 2+ years in a technical security role (SOC analyst, developer, incident response, technical auditor, or IT administrator with security responsibilities)
• Strong technical writing—able to produce clear policy documents and explain concepts to a client\'s leadership team
• Experience managing internal projects and initiatives; self-managing and reliable on deadlines
• High personal and professional ethical standards
• Growth-oriented, collaborative, and comfortable adapting across many industries and client environments

Preferred Qualifications

• Background in compliance frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, TX-RAMP) or security frameworks (NIST CSF, CIS, COBIT)
• Experience in security operations, secure SDLC, system administration (Windows/Linux), cloud administration (AWS, Azure, Google Cloud), or network/firewall administration
• Familiarity with security tools and concepts (SIEM, WAF, vulnerability scanning, penetration testing, MFA, SSO, encryption, SSL/TLS)
• General scripting or coding experience
• Cybersecurity certifications (SSCP, CompTIA Security+, or similar)
• Degree in Cybersecurity or a related field