IT Governance & Compliance Lead

Hammerjack Pty Ltd; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Hammerjack Pty Ltd in the Philippines is seeking an IT Governance, Risk and Compliance (GRC) professional to support implementation, monitoring, and continuous improvement of GRC programs, ensuring compliance with policies, regulatory obligations, audits, and information security standards.

You will coordinate audits, develop and maintain governance frameworks, and track remediation actions, KPIs, and board materials, with a focus on ISO 27001, COBIT, ITIL and NIST guidelines, while

Qualifications

• Bachelor's degree in IT, information security, or related field.
• 4+ years experience in IT governance, IT audit, compliance, risk management or information security.
• Experience supporting ISO 27001 compliance initiatives and audits.
• Knowledge of IT controls, policies, and governance frameworks.
• Strong analytical, documentation, and report-writing skills.
• Excellent communication and stakeholder management abilities.
• Certification in ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CGEIT, or ITIL is a plus.

Responsibilities

• Monitor compliance with IT policies, standards, procedures, and regulatory requirements
• Coordinate internal and external audit activities, including evidence gathering, validation, issue tracking, and remediation follow-up
• Support development and maintenance of IT policies, procedures, and governance frameworks
• Assist in ISO 27001 compliance initiatives
• Conduct quality assurance reviews of Service Desk tickets, change management, and other compliance processes
• Monitor governance processes to identify gaps and propose improvements
• Prepare governance reports, dashboards, KPIs, and management presentations
• Track compliance metrics, audit findings, and remediation actions
• Lead Technology Board activities and coordinate follow-up
• Support governance communications and stakeholder coordination

Skills

IT Governance

IT Audit

Compliance

Risk Management

Information Security

Stakeholder Management

Documentation & Reporting

Communication

Education

Bachelor's degree in Information Technology / Information Security / Computer Science

Tools

ISO 27001

COBIT

ITIL

NIST

Job description

Hammerjack Pty Ltd in the Philippines is seeking an IT Governance, Risk and Compliance (GRC) professional to support implementation, monitoring, and continuous improvement of GRC programs, ensuring compliance with policies, regulatory obligations, audits, and information security standards.

You will coordinate audits, develop and maintain governance frameworks, and track remediation actions, KPIs, and board materials, with a focus on ISO 27001, COBIT, ITIL and NIST guidelines, while