Remote GRC & Security Compliance Specialist

Avid; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Health & life insurance

Referral rewards

Generous leave policies

Job summary

Avid is seeking a GRC Specialist for a remote role in the Philippines with a 6:00 PM–3:00 AM Manila shift. You will drive compliance, risk management, and security assurance across customer and partner engagements.

You will own the third-party risk program, coordinate audits, map controls to NIST CSF/800-53, and collaborate with Legal to review contracts and data protection measures. Strong communication and multi-stakeholder coordination are essential.

Qualifications

• 2-3+ years in security compliance or GRC-related work.
• Familiarity with NIST 800-53, NIST CSF, or SSDF.
• Exposure to SOC 2 or similar audits preferred.
• Strong English written and verbal communication.

Responsibilities

• Respond to and maintain customer and partner security questionnaires.
• Own third-party risk management program: intake, assessment, and risk determination.
• Perform Vendor Security Assessments for new and existing vendors.
• Maintain the Risk Register: log new risk acceptances, renewals, and current status.
• Run self‑assessment worksheets against NIST 800-53 and NIST CSF.
• Map security evidence to NIST SSDF and OWASP controls.
• Coordinate audits and assist with evidence collection and remediation.
• Support Legal with security input for contracts and data protection.

Skills

Security compliance

Audit support

GRC experience

NIST 800-53

NIST CSF

SSDF

SOC 2 familiarity

Audit coordination

Stakeholder communication

English proficiency

Tools

Spreadsheets

Collaboration tools

Job description

Avid is seeking a GRC Specialist for a remote role in the Philippines with a 6:00 PM–3:00 AM Manila shift. You will drive compliance, risk management, and security assurance across customer and partner engagements.

You will own the third-party risk program, coordinate audits, map controls to NIST CSF/800-53, and collaborate with Legal to review contracts and data protection measures. Strong communication and multi-stakeholder coordination are essential.