Remote GRC Specialist: Risk, Compliance & Audit Lead

Philippines (PHC1) Avid Philippines; Philippines; Remote; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Health & life insurance

Referral rewards

Generous leave policies

Job summary

Avid Philippines is seeking a GRC Specialist to drive compliance, risk management, and security assurance from a remote setting in the Philippines. You will own responses to customer and partner security questionnaires and manage third-party risk, NIST/SSDF self-assessments, and audits.

Join a global security team and help coordinate audits, track remediation, and support contract reviews with clear, accurate security input.

Qualifications

• 2-3+ years of experience in security compliance, audit support, or GRC-adjacent work.
• Familiarity with NIST 800-53, NIST CSF, or SSDF (exposure through coursework, certification study, or prior role experience).
• Exposure to SOC 2 or similar third-party audit processes preferred; hands-on audit coordination experience not required.
• Strong English written/verbal communication skills, able to draft accurate questionnaire responses with minimal editing.

Responsibilities

• Respond to and maintain customer and partner security questionnaires.
• Own Avid's third-party risk management (TPRM) program: vendor and third-party risk intake, assessment, and risk determination in partnership with security leadership.
• Perform Vendor Security Assessments for new and existing third-party relationships.
• Maintain the Risk Register: log new risk acceptances, track renewal dates, and keep the register current.
• Run self-assessment worksheets against NIST 800-53 and NIST CSF control families.
• Map security pipeline evidence to NIST SSDF and OWASP control practices.
• Complete periodic data security reviews and help track remediation of findings.
• Maintain and review Security Policy documentation and other compliance records and documentation.
• Own coordination of Avid's current security audit efforts (auditor liaison, evidence collection, remediation tracking) and any future third-party compliance audits.
• Support Legal with technical security input for contract and data protection reviews.

Skills

Security compliance

Audit support

GRC

NIST CSF/800-53

SOC 2 exposure

Stakeholder coordination

English communication

Spreadsheets

Collaboration tools

Tools

Spreadsheets

Collaboration tools

Job description

Avid Philippines is seeking a GRC Specialist to drive compliance, risk management, and security assurance from a remote setting in the Philippines. You will own responses to customer and partner security questionnaires and manage third-party risk, NIST/SSDF self-assessments, and audits.

Join a global security team and help coordinate audits, track remediation, and support contract reviews with clear, accurate security input.