Remote GRC Analyst: Compliance Platform Expert

Outsourced; Metro Manila; Remoto; PHP 600.000 - 1.000.000; Tempo pieno

Descrizione del lavoro

Outsourced in the Philippines is seeking a GRC Analyst to manage client compliance programs across platforms. You will handle evidence collection, audits readiness, access reviews, and respond to Slack queries, while tracking work in Linear.

Responsibilities include maintaining GRC platforms (Drata, Vanta, Secureframe, Thoropass, Sprinto), conducting risk assessments, and coordinating with US teams. This role is home-based with night shifts to align with US business hours.

Competenze

• 2-4 years hands-on in GRC, IT audit, compliance, or security operations.
• Direct experience working multiple clients or engagements simultaneously.
• Working knowledge of SOC 2, ISO 27001, HIPAA, NIST 800-53, PCI DSS, GDPR.
• Hands-on experience with at least one GRC platform: Drata, Vanta, Secureframe, Thoropass, Sprinto, or similar.
• Strong written English, able to respond to clients in Slack and in writing daily.

Mansioni

• Keep client compliance platforms healthy day to day: control status, evidence freshness, failing tests, and broken integrations.
• Run a weekly pass across accounts to catch gaps and stale evidence before audits.
• Triage failing controls, fix what you can, open Linear tickets with owner and SLA, drive to closed.
• Collect audit-ready evidence: screenshots with dates, correct system views, and auditable permissions.
• Prepare and organize evidence packages for SOC 2 Type I/II, ISO 27001, and other audits.
• Run user access reviews end to end: exports, chase owners, document findings and actions, track to sign-off.
• Conduct vendor and third‑party risk assessments: collect SOC 2, DPAs, review data handling and integrations.
• Work new clients through gap assessments: map environment to framework, identify missing items, create remediation plan in Linear.
• Stand up GRC platform for new clients, connect integrations, move first controls.

Conoscenze

GRC experience

Multi-client engagements

English writing

Compliance operations

Strumenti

Drata

Vanta

Secureframe

Thoropass

Sprinto

Descrizione del lavoro

Outsourced in the Philippines is seeking a GRC Analyst to manage client compliance programs across platforms. You will handle evidence collection, audits readiness, access reviews, and respond to Slack queries, while tracking work in Linear.

Responsibilities include maintaining GRC platforms (Drata, Vanta, Secureframe, Thoropass, Sprinto), conducting risk assessments, and coordinating with US teams. This role is home-based with night shifts to align with US business hours.