Remote GRC Specialist: Risk, Audit & Compliance Lead

Visa Hunt; Philippines; Remote; PHP 480,000 - 720,000; Full time

Benefits offered by this job

Health & life insurance

Remote work model

Development programs

Diversity & inclusion

Job summary

Avid in the Philippines is seeking a GRC Specialist to drive compliance, risk management, and security assurance as part of the security team. The role focuses on third-party risk, questionnaire responses, and audits from a remote, Manila-time schedule.

You will own the TPRM program, perform vendor security assessments, map controls to NIST SSDF/OWASP, and coordinate audits while supporting legal reviews. This is a remote role with a Manila-time shift.

Qualifications

• 2–3+ years in security compliance or GRC-adjacent work.
• Familiarity with NIST 800-53, NIST CSF, or SSDF.
• Exposure to SOC 2 or similar third-party audit processes preferred; hands-on audit coordination experience not required.
• Strong English written/verbal communication skills.

Responsibilities

• Respond to and maintain customer and partner security questionnaires.
• Own Avid's third-party risk management (TPRM) program; vendor and third-party risk intake, assessment, and risk determination in partnership with security leadership.
• Perform Vendor Security Assessments for new and existing third-party relationships.
• Maintain the Risk Register: log risk acceptances, track renewal dates, and keep the register current.
• Run self-assessment worksheets against NIST 800-53 and NIST CSF control families.
• Map security pipeline evidence to NIST SSDF and OWASP control practices.
• Complete periodic data security reviews and help track remediation of findings.
• Maintain and review Security Policy documentation and other compliance records.
• Own coordination of Avid's current security audit efforts (auditor liaison, evidence collection, remediation tracking).
• Support Legal with technical security input for contract and data protection reviews.

Skills

Security compliance

Audit coordination

GRC awareness

English communication

Project coordination

Tools

NIST 800-53

NIST CSF

SSDF

SOC 2

Job description

Avid in the Philippines is seeking a GRC Specialist to drive compliance, risk management, and security assurance as part of the security team. The role focuses on third-party risk, questionnaire responses, and audits from a remote, Manila-time schedule.

You will own the TPRM program, perform vendor security assessments, map controls to NIST SSDF/OWASP, and coordinate audits while supporting legal reviews. This is a remote role with a Manila-time shift.