GRC Lead — IT Risk & Compliance Strategist (Hybrid)

MicroSourcing; Manila; Hybride; PHP 1 800 000 - 2 400 000; Plein temps

Avantages offerts par ce poste

Healthcare on day one

Performance bonuses

Paid time-off

Résumé du poste

MicroSourcing invites an experienced GRC Lead to join our Manila-area hybrid team. Based at Eastwood City, Quezon City, this role drives governance, risk, and compliance programs across IT and business functions.

You will partner with Information Security, IT, Internal Audit, and stakeholders to identify risks, strengthen controls, and ensure regulatory readiness. The Lead GRC Associate oversees SOX/SOC programs, maintains documentation, and drives remediation.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Internal Audit, or related field.
• 8+ years with CPA required
• 3+ years in GRC, IT Risk, Information Security Compliance, Technology Risk, or related fields.
• Experience supporting IT compliance programs, risk assessments, control frameworks, and remediation activities.
• Familiarity with SOX, SOC, ITGC, ISO 27001, NIST, or similar compliance requirements.

Responsabilités

• Manage IT governance, risk, and compliance activities across business and technology functions.
• Perform IT risk assessments to identify risks and remediation needs.
• Maintain and improve IT policies, standards, procedures, and control documentation.
• Support SOX, SOC, ISO 27001 and related frameworks.
• Coordinate with process owners to ensure understanding and implementation of requirements.
• Monitor control activities and address identified risks and gaps.
• Assist in audit readiness and evidence collection.

Connaissances

GRC expertise

IT risk assessment

Regulatory compliance

Stakeholder communication

Formation

Bachelor's degree in IT/CS/Accounting

CPA required

Outils

AuditBoard

ServiceNow GRC

Archer

OneTrust

TeamMate+

Description du poste

MicroSourcing invites an experienced GRC Lead to join our Manila-area hybrid team. Based at Eastwood City, Quezon City, this role drives governance, risk, and compliance programs across IT and business functions.

You will partner with Information Security, IT, Internal Audit, and stakeholders to identify risks, strengthen controls, and ensure regulatory readiness. The Lead GRC Associate oversees SOX/SOC programs, maintains documentation, and drives remediation.