Lead GRC Associate: IT Risk & Compliance (Hybrid)

MicroSourcing; Philippines; Hybrid; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Healthcare day one**

Dependent coverage

Performance bonuses

Job summary

MicroSourcing seeks a Lead GRC Associate to manage governance, risk and compliance initiatives across IT and business units. The role partners with Information Security, IT and Internal Audit to strengthen controls and ensure regulatory readiness.

You will drive remediation, document controls, and support SOX, SOC, and ISO 27001 programs while coordinating with process owners to embed compliance. Hybrid setup with night shifts available.

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity, Accounting or related field.
• CPA certification is required.
• 3+ years in GRC, IT Risk, Information Security Compliance or related fields.
• Experience supporting IT compliance programs, risk assessments, control frameworks, remediation activities.

Responsibilities

• Manage IT governance, risk and compliance activities across business and technology functions.
• Conduct IT risk assessments to identify risks, gaps and remediation needs.
• Maintain and improve IT policies, standards, procedures and control documentation.
• Support SOX, SOC, ISO 27001, NIST and other security/regulatory frameworks.

Skills

GRC

IT Risk

SOX

SOC

ISO 27001

Audit Tools

Education

Bachelor's degree in IT/CS/Cybersecurity/Accounting

CPA required

Tools

AuditBoard

ServiceNow GRC

Archer

OneTrust

TeamMate+

Job description

MicroSourcing seeks a Lead GRC Associate to manage governance, risk and compliance initiatives across IT and business units. The role partners with Information Security, IT and Internal Audit to strengthen controls and ensure regulatory readiness.

You will drive remediation, document controls, and support SOX, SOC, and ISO 27001 programs while coordinating with process owners to embed compliance. Hybrid setup with night shifts available.