Remote Cyber GRC & Third-Party Risk Consultant

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,200,000 - 1,700,000; Part time

Job summary

Hammerjack Pty Ltd is seeking a Cybersecurity GRC & Third-Party Risk Consultant for a remote contract role. The candidate will conduct vendor risk assessments, review questionnaires, and evaluate security artifacts to identify and remediate risks.

You will support GRC, TPRM, and Identity Governance initiatives, onboarding apps into Okta Governance, and assisting with access certification across enterprise apps.

Qualifications

• 3–7+ years in cybersecurity GRC across multiple sectors.
• Experience reviewing security questionnaires and remediation tracking.
• Ability to communicate risks to technical and non-technical audiences.

Responsibilities

• Conduct third-party/vendor cybersecurity risk assessments.
• Review vendor security questionnaires and evidence to identify risks.
• Evaluate architecture diagrams and data flows for security implications.
• Identify gaps and track remediation to closure.
• Support GRC, TPRM, and Identity Governance initiatives.
• Assist onboarding apps into Okta Identity Governance campaigns.
• Support access certification and identity governance across apps.
• Leverage GRC tooling (OneTrust where applicable) for assessments.

Skills

Third-Party Risk Management

GRC Experience

OneTrust

Identity Governance

Stakeholder Communication

Tools

OneTrust Administration

Okta Identity Governance

Job description

Hammerjack Pty Ltd is seeking a Cybersecurity GRC & Third-Party Risk Consultant for a remote contract role. The candidate will conduct vendor risk assessments, review questionnaires, and evaluate security artifacts to identify and remediate risks.

You will support GRC, TPRM, and Identity Governance initiatives, onboarding apps into Okta Governance, and assisting with access certification across enterprise apps.