GRC Security Lead: Risk, Compliance & Audit

The Dairy Farm Company, Limited- ROHQ; Mandaluyong; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

DFI Retail Group in the Philippines is actively seeking a Senior Security GRC Analyst with 5+ years of experience to strengthen governance, risk, and compliance programs across enterprise environments. You will lead risk assessments, maintain the security register, support audits (ISO 27001, PCI DSS, GDPR where applicable), and translate security controls into business language for IT and product teams.

Collaborate with Information Security and IT to protect assets and drive cybersecurity

Qualifications

• Bachelor's degree in information technology, or Computer Science, or equivalent.
• 5+ years in security governance, risk, compliance, audit, or security assurance roles.
• Proven track record in risk assessments, risk register management, and remediation tracking.
• Working knowledge of ISO/IEC 27001 (Annex A) and NIST CSF.
• Experience in supporting audits, evidence collection, and audit readiness.
• Strong ability to draft clear, actionable policies and procedures; translate regulatory requirements into control procedures.
• Ability to translate technical diagrams into risk/control language.
• Strong written communication skills.

Responsibilities

• Governance and Policy Management – own policy lifecycle, updates, approvals and exceptions.
• Risk Management – conduct risk assessments for projects, systems, and vendors and document risks, treatments, and residual ratings.
• Security Architecture & Data Flow Review – review diagrams and data flows against standards and classifications.
• Audit and Compliance Support – coordinate annual security audits and certifications; collect evidence and coordinate with stakeholders.
• Vendor Risk – assist with vendor security risk assessments and evidence reviews; track remediation.
• Reporting – prepare dashboards, reports, and leadership presentations on risk, compliance, audit and awareness.

Education

Bachelor's degree in information technology, or Computer Science

Tools

ISO 27001

NIST CSF

PCI DSS

GDPR

Job description

DFI Retail Group in the Philippines is actively seeking a Senior Security GRC Analyst with 5+ years of experience to strengthen governance, risk, and compliance programs across enterprise environments. You will lead risk assessments, maintain the security register, support audits (ISO 27001, PCI DSS, GDPR where applicable), and translate security controls into business language for IT and product teams.

Collaborate with Information Security and IT to protect assets and drive cybersecurity