GRC Cybersecurity Lead — vCISO Advisory

Hire Kaya LLC.; Philippines; Remote; PHP 5,660,000 - 9,434,000; Full time

Job summary

HireKayana is seeking a leadership-track GRC professional to guide US-based client engagements from the Philippines. You will lead governance, risk, and compliance initiatives, working with a vCISO to provide strategic cybersecurity leadership across multiple industries.

Role emphasizes policy development, risk assessment, and client advisory, with a focus on avoiding routine SOC tasks and moving toward leadership in security program oversight. Remote work with global clients.

Qualifications

• Experience in governance, risk, and compliance frameworks.
• Ability to produce clear policy documents and explain concepts to leadership.
• Experience managing internal projects and deadlines.
• High personal and professional ethical standards.

Responsibilities

• Lead internal cybersecurity audits to keep clients' environments compliant and secure.
• Perform quantitative risk assessments to help prioritize security investments.
• Write cybersecurity policy documents for clients.
• Respond to security questionnaires from clients' customers.
• Assist with evidence collection for external audits.
• Advise clients on cybersecurity topics and manage client accounts.
• Plan and run tabletop exercises for incident response.
• Contribute to service development to improve client deliverables.

Skills

2+ years in security role

Strong technical writing

Project management experience

Growth-oriented & collaborative

Education

Bachelor's degree in Cybersecurity or related field

Cybersecurity certifications (SSCP, CompTIA Security+ or similar)

Tools

SIEM

WAF

Vulnerability scanning

Penetration testing

MFA

SSO

Encryption/SSL/TLS

Job description

HireKayana is seeking a leadership-track GRC professional to guide US-based client engagements from the Philippines. You will lead governance, risk, and compliance initiatives, working with a vCISO to provide strategic cybersecurity leadership across multiple industries.

Role emphasizes policy development, risk assessment, and client advisory, with a focus on avoiding routine SOC tasks and moving toward leadership in security program oversight. Remote work with global clients.