GRC Specialist

Robinsons Retail Holdings Inc.; Quezon City; On-site; PHP 600,000 - 900,000; Full time

Job summary

Robinsons Retail Holdings Inc. is seeking a GRC Specialist to support governance, risk, and compliance initiatives.

You will execute risk assessments, manage compliance activities, and assist with control testing to strengthen our security program. Collaborating with cybersecurity, IT, legal, and business teams, you will ensure security and privacy requirements are documented, evidenced, and continuously improved, helping the company maintain regulatory and contractual compliance while enabling

Qualifications

• 2–4 years of experience in GRC, compliance, risk management, or security assurance.
• Familiarity with security frameworks and standards (NIST, ISO 27001, CIS).
• Experience supporting audits and managing compliance evidence.
• Strong analytical, leadership, and communication skills.
• Relevant certifications such as CGRC, CISA, or CISM is preferred but not required.

Responsibilities

• Execute risk assessments, compliance activities, and control testing.
• Provide audit support and evidence collection.
• Collaborate with cybersecurity, IT, legal, and business teams to implement security and privacy controls.
• Maintain regulatory, contractual, and internal security compliance while enabling risk management.

Skills

GRC knowledge

Compliance management

Audit support

Leadership

Communication skills

Tools

NIST framework

ISO 27001

CIS controls

Job description

The GRC Specialist supports the organization’s governance, risk, and compliance (GRC) program by

executing risk assessments, compliance activities, control testing, and audit support. This role works closely with other cybersecurity pillars, IT, legal, and business teams to ensure security and privacy requirements are implemented, evidenced, and continuously improved. The GRC Specialist plays a key role in maintaining compliance with regulatory, contractual, and internal security requirements while enabling the business to manage risk effectively.

Job Qualifications

• 2–4 years of experience in GRC, compliance, risk management, or security assurance.
• Familiarity with security frameworks and standards (NIST, ISO 27001, CIS).
• Experience supporting audits and managing compliance evidence.
• Strong analytical, leadership, and communication skills.
• Relevant certifications such as CGRC, CISA, or CISM is preferred but not required.