Lead GRC Associate

MicroSourcing; Metro Manila; On-site; PHP 1,700,000 - 2,600,000; Full time

Benefits offered by this job

Healthcare coverage day one

Dependents coverage

Paid time off with cash conversion

Group life insurance

Performance bonuses

Job summary

MicroSourcing's Lead GRC Associate role in Eastwood City, Quezon City, offers hybrid work with a night shift. You will support IT risk assessments, control frameworks, and compliance programs across IT and business units.

You will work with Information Security, Internal Audit, and stakeholders to strengthen controls and drive remediation. The role emphasizes regulatory compliance, SOX/SOC/ISO27001, and continuous improvement in governance processes while coordinating documentation, evidence,

Qualifications

• 8+ years with CPA
• 3+ years in GRC/IT Risk/Information Security Compliance
• Experience supporting IT compliance programs, risk assessments, control frameworks, remediation

Responsibilities

• Manage IT governance, risk, and compliance activities across business and technology functions.
• Perform IT risk assessments to identify risks, control gaps, remediation needs.
• Maintain and improve IT policies, standards, procedures, and control documentation.
• Support compliance programs such as SOX, SOC, ISO 27001, and other frameworks.
• Coordinate with process owners to ensure understanding and implementation of requirements.
• Monitor control activities and address risks and gaps with stakeholders.
• Support audit readiness with documentation, evidence collection, and responses.
• Track remediation activities and corrective action plans to closure.
• Partner with IT teams during system implementations to assess governance and compliance needs.
• Evaluate technology processes and recommend improvements to strengthen security and compliance posture.
• Assist in preparing risk reports and management updates.
• Communicate security risks and mitigation strategies to technical and business stakeholders.

Skills

GRC knowledge

IT risk assessment

Regulatory compliance

Stakeholder communication

SOX SOC ISO27001

Education

Bachelor's degree in IT / CS / Cybersecurity / Accounting

CPA

Tools

AuditBoard

ServiceNow GRC

Archer

OneTrust

TeamMate+

Job description

Discover your 100% YOU with MicroSourcing!

Position: Lead GRC Associate

Location: Eastwood City, Quezon City

Work setup & shift: Hybrid | Night shift

Why join MicroSourcing?

You'll have:

Competitive Rewards: Enjoy above-market compensation, healthcare coverage on day one, plus one or more dependents, paid time-off with cash conversion, group life insurance, and performance bonuses

A Collaborative Spirit: Contribute to a positive and engaging work environment by participating in company-sponsored events and activities.

Work-Life Harmony: Enjoy the balance between work and life that suits you with flexible work arrangements.

Career Growth: Take advantage of opportunities for continuous learning and career advancement.

Inclusive Teamwork: Be part of a team that celebrates diversity and fosters an inclusive culture.

Your Role:

The Lead GRC Associate will support the organization's Governance, Risk, and Compliance (GRC) programs by managing IT risk assessments, compliance initiatives, control frameworks, and security governance activities. This role will partner with Information Security, IT, Internal Audit, and business stakeholders to identify technology risks, strengthen internal controls, maintain compliance readiness, and drive remediation efforts.

The Lead GRC Associate will support regulatory and industry compliance requirements, including SOX and SOC programs, by ensuring IT processes and controls are properly documented, monitored, and continuously improved.

Key Responsibilities

• Manage and support IT governance, risk, and compliance activities across business and technology functions.

• Perform IT risk assessments to identify potential risks, control gaps, and areas requiring remediation.

• Maintain and improve IT policies, standards, procedures, and control documentation.

• Support compliance programs such as SOX, SOC, ISO 27001, and other applicable security and regulatory frameworks.

• Coordinate with process owners to ensure compliance requirements are understood and effectively implemented.

• Monitor control activities and collaborate with stakeholders to address identified risks and compliance gaps.

• Support audit readiness activities by coordinating documentation, evidence collection, and responses with relevant teams.

• Track remediation activities, risk acceptance, and corrective action plans to ensure timely closure of identified issues.

• Partner with IT teams during system implementations and process changes to assess governance and compliance requirements.

• Evaluate technology processes and recommend improvements to strengthen security, operational effectiveness, and compliance posture.

• Assist in preparing risk reports, compliance dashboards, and management updates.

• Communicate security risks, compliance requirements, vulnerabilities, and mitigation strategies to technical and business stakeholders.

• Support continuous improvement initiatives related to IT controls, governance processes, and risk management practices.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Internal Audit, or related field.

• 8+ years with CPA required

• 3+ years of experience in Governance, Risk, and Compliance (GRC), IT Risk, Information Security Compliance, Technology Risk, or related fields.

• Experience supporting IT compliance programs, risk assessments, control frameworks, and remediation activities.

• Familiarity with SOX, SOC, ITGC, ISO 27001, NIST, or similar compliance requirements.

• Experience working with audit, risk, or compliance management tools (e.g., AuditBoard, ServiceNow GRC, Archer, OneTrust, TeamMate+).

Preferred Qualifications/Nice to Have

• Strong understanding of IT governance, risk management, and compliance concepts.

• Knowledge of security frameworks and compliance standards such as SOX, SOC, ISO 27001, NIST, or COBIT.

• Experience collaborating with internal audit, external audit, security, and technology teams is preferred.

• Big 4 Technology Risk, IT Audit, or Risk Advisory experience is an advantage.

• Strong analytical skills with the ability to identify risks and recommend practical solutions.

• Excellent communication skills with the ability to work with technical and non-technical stakeholders.

• Strong documentation, organization, and project coordination skills.

• Ability to manage multiple compliance activities and prioritize deadlines.

• Detail-oriented with strong problem-solving capabilities.

About MicroSourcing

With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.

Our commitment to 100% YOU

MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.

At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!

For more information, visit https://www.microsourcing.com/

*Terms & conditions apply