Remote GRC Analyst: Master Client Compliance & Controls

Outsourced Quality Assured Services Pty; Philippines; Remote; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Homebased

Job summary

Outsourced Quality Assured Services Pty is seeking a GRC Analyst (Homebased) to manage client compliance platforms and drive audit readiness across multiple accounts.

You will work hands-on inside GRC platforms, close failing controls, collect evidence for SOC 2, ISO 27001, and other audits, and coordinate with U.S. engagement leads. This role requires overlap with U.S. business hours and strong written English.

Qualifications

• Two to four years hands-on in GRC, IT audit, compliance, or security operations.
• Direct experience working multiple clients or engagements at the same time is a firm requirement.
• Experience with at least two: SOC 2, ISO 27001, HIPAA, NIST 800-53, CMMC, PCI DSS, GDPR.
• Hands-on experience with a GRC platform: Drata, Vanta, Secureframe, Thoropass, Sprinto, or similar.
• Strong written English; daily Slack/writing communication.

Responsibilities

• GRC PLATFORM OPERATIONS: Maintain healthy client platforms, track control status and evidence.
• EVIDENCE, AUDITS, AND REVIEWS: Prepare evidence for SOC 2, ISO 27001 and others; run access reviews.
• GAP ASSESSMENTS AND ONBOARDING: Guide new clients through initial gap assessments and platform setup.
• COMPLIANCE QUESTIONS IN SLACK: Provide clear, correct answers to client questions during business hours.
• SECURITY QUESTIONNAIRES: Complete inbound questionnaires and vendor assessments within standard turnarounds.
• IT AND ACCESS OPERATIONS SUPPORT: Manage joiner/mover/leaver workflows across Okta, Google Workspace, Slack, Jamf.
• TRACKING AND COORDINATION: Use Linear for all client requests and provide weekly status updates.

Skills

GRC concepts

IT audit

Security operations

Slack comms

Tools

Drata

Vanta

Secureframe

Thoropass

Sprinto

Job description

Outsourced Quality Assured Services Pty is seeking a GRC Analyst (Homebased) to manage client compliance platforms and drive audit readiness across multiple accounts.

You will work hands-on inside GRC platforms, close failing controls, collect evidence for SOC 2, ISO 27001, and other audits, and coordinate with U.S. engagement leads. This role requires overlap with U.S. business hours and strong written English.