GRC Lead — IT Risk & Compliance Strategist (Hybrid)

MicroSourcing; Manila; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Healthcare on day one

Performance bonuses

Paid time-off

Job summary

MicroSourcing invites an experienced GRC Lead to join our Manila-area hybrid team. Based at Eastwood City, Quezon City, this role drives governance, risk, and compliance programs across IT and business functions.

You will partner with Information Security, IT, Internal Audit, and stakeholders to identify risks, strengthen controls, and ensure regulatory readiness. The Lead GRC Associate oversees SOX/SOC programs, maintains documentation, and drives remediation.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Internal Audit, or related field.
• 8+ years with CPA required
• 3+ years in GRC, IT Risk, Information Security Compliance, Technology Risk, or related fields.
• Experience supporting IT compliance programs, risk assessments, control frameworks, and remediation activities.
• Familiarity with SOX, SOC, ITGC, ISO 27001, NIST, or similar compliance requirements.

Responsibilities

• Manage IT governance, risk, and compliance activities across business and technology functions.
• Perform IT risk assessments to identify risks and remediation needs.
• Maintain and improve IT policies, standards, procedures, and control documentation.
• Support SOX, SOC, ISO 27001 and related frameworks.
• Coordinate with process owners to ensure understanding and implementation of requirements.
• Monitor control activities and address identified risks and gaps.
• Assist in audit readiness and evidence collection.

Skills

GRC expertise

IT risk assessment

Regulatory compliance

Stakeholder communication

Education

Bachelor's degree in IT/CS/Accounting

CPA required

Tools

AuditBoard

ServiceNow GRC

Archer

OneTrust

TeamMate+

Job description

MicroSourcing invites an experienced GRC Lead to join our Manila-area hybrid team. Based at Eastwood City, Quezon City, this role drives governance, risk, and compliance programs across IT and business functions.

You will partner with Information Security, IT, Internal Audit, and stakeholders to identify risks, strengthen controls, and ensure regulatory readiness. The Lead GRC Associate oversees SOX/SOC programs, maintains documentation, and drives remediation.