Remote GRC Specialist for SOC 2 & ISO 27001

BCM One , Inc.; Makati; Remote; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Health Insurance

13th month pay

Paid time off

Retirement plan

Job summary

BCM One, Inc. is seeking a GRC Specialist to join our global compliance team. You will bridge GRC and ITSM to strengthen security controls, align with standards, and support audits across geographies.

The role reports to the Global Manager of Info Sec & GRC and focuses on risk mitigation and regulatory compliance. Ideal candidates have 5+ years in GRC with SOC 2 and ISO 27001 experience, strong documentation, and the ability to collaborate across IT, security, and legal teams in a global

Qualifications

• 5+ years in Security GRC, leading design and operation of controls.
• Strong SOC 2 experience with GRC frameworks (ISO 27001, NIST 800-53, CIS, GDPR).
• Proven audit preparation and evidence gathering for internal/external audits.
• Ability to assess and prioritize risks using risk-based thinking.
• Monitor security/compliance via KPIs, SLAs, OLAs; strong documentation.
• Experience collaborating with IT, security, compliance and business teams.

Responsibilities

• Develop, implement, and maintain GRC frameworks (ISO 27001, SOC 2, GDPR).
• Conduct risk assessments and design/validate security controls.
• Manage audits, including preparation, evidence, reporting, remediation.
• Lead cross-functional security control adoption across geographies.
• Document policies and procedures per global standards.
• Coordinate with Privacy/Legal on data protection and impact assessments.
• Support Business Continuity testing and updates; monitor GRC metrics.
• Assist change management to ensure compliant IT operations.

Skills

SOC 2

ISO 27001

NIST 800-53

GDPR

Risk assessment

Audits & evidence

ITIL familiarity

Job description

BCM One, Inc. is seeking a GRC Specialist to join our global compliance team. You will bridge GRC and ITSM to strengthen security controls, align with standards, and support audits across geographies.

The role reports to the Global Manager of Info Sec & GRC and focuses on risk mitigation and regulatory compliance. Ideal candidates have 5+ years in GRC with SOC 2 and ISO 27001 experience, strong documentation, and the ability to collaborate across IT, security, and legal teams in a global