GRC Specialist

Robinsons Retail Holdings Inc.; Quezon City; On-site; PHP 450,000 - 650,000; Full time

Job summary

Robinsons Retail Holdings Inc. is seeking a GRC Specialist to support governance, risk, and compliance programs. You will execute risk assessments, engage in control testing, and assist audits, ensuring regulatory and contractual security requirements are met.

Collaboration with cybersecurity, IT, legal, and business teams is essential to implement and evidence security controls, while enabling the business to manage risk effectively and maintain privacy compliance.

Qualifications

• 2–4 years of experience in GRC, compliance, risk management, or security assurance.
• Familiarity with security frameworks and standards (NIST, ISO 27001, CIS).
• Experience supporting audits and managing compliance evidence.
• Strong analytical, leadership, and communication skills.
• Relevant certifications such as CGRC, CISA, or CISM is preferred but not required.

Responsibilities

• Execute risk assessments, compliance activities, control testing, and audit support.
• Collaborate with cybersecurity, IT, legal, and business teams to ensure security and privacy requirements are implemented and evidenced.
• Maintain compliance with regulatory, contractual, and internal security requirements while enabling business risk management.

Skills

GRC experience

Analytical skills

Leadership

Communication skills

Job description

The GRC Specialist supports the organization’s governance, risk, and compliance (GRC) program by

executing risk assessments, compliance activities, control testing, and audit support. This role works closely with other cybersecurity pillars, IT, legal, and business teams to ensure security and privacy requirements are implemented, evidenced, and continuously improved. The GRC Specialist plays a key role in maintaining compliance with regulatory, contractual, and internal security requirements while enabling the business to manage risk effectively.

Job Qualifications

• 2–4 years of experience in GRC, compliance, risk management, or security assurance.
• Familiarity with security frameworks and standards (NIST, ISO 27001, CIS).
• Experience supporting audits and managing compliance evidence.
• Strong analytical, leadership, and communication skills.
• Relevant certifications such as CGRC, CISA, or CISM is preferred but not required.