Remote GRC InfoSec Consultant

Cognisys; Manila; On-site; PHP 1,450,000 - 1,650,000; Full time

Benefits offered by this job

PTO 22 days

Public holidays

Birthday leave

Health insurance

Training budget

Referral bonus

Job summary

Cognisys is seeking an Information Security Consultant to join our expanding GRC team in the Philippines (Remote). You will help organisations strengthen governance, risk and compliance capabilities through practical, business-focused security advice across ISO 27001, SOC 2, and NIST frameworks.

Our team delivers client-facing advisory services, risk assessments, and governance documentation, while supporting audits, certifications and remediation programs.

Qualifications

• 2–5 years' experience in security, risk, compliance or GRC-related roles.
• Experience with recognised security frameworks is desirable.
• Experience supporting compliance or certification initiatives.
• Strong written and verbal communication skills.
• Excellent stakeholder management and relationship-building skills.

Responsibilities

• Lead and support delivery of GRC engagements across multiple clients.
• Contribute to security posture assessments and maturity reviews.
• Assist in design and implementation of GRC programmes.
• Support audit preparation, certification processes and external assessments.
• Develop remediation plans and track progress with clients.
• Lead client workshops and risk assessments.
• Build trusted client relationships with practical security advice.

Skills

GRC experience

Security consulting

Stakeholder management

Communication skills

Organizational skills

Analytical mindset

Collaboration

Tools

Vanta

Job description

Cognisys is seeking an Information Security Consultant to join our expanding GRC team in the Philippines (Remote). You will help organisations strengthen governance, risk and compliance capabilities through practical, business-focused security advice across ISO 27001, SOC 2, and NIST frameworks.

Our team delivers client-facing advisory services, risk assessments, and governance documentation, while supporting audits, certifications and remediation programs.