Remote Vendor Security Compliance Specialist

Scale Up Recruiting Partners; Metro Manila; On-site; PHP 5,474,000 - 7,908,000; Full time

Job summary

Scale Up Recruiting Partners is hiring a Vendor Security Questionnaire Specialist to own the end-to-end questionnaire process for multiple client accounts. You will engage with U.S.-based startups, monitor requests in Slack, and coordinate with technical stakeholders to deliver accurate responses on time.

The role requires experience in GRC/compliance, knowledge of SIG/CAIQ, and familiarity with SOC 2 and ISO 27001, with strong written and verbal English to communicate across diverse

Qualifications

• 2–4 years in vendor security questionnaires or GRC/compliance roles.
• Hands-on with SIG, CAIQ, or similar vendor questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Strong written and spoken English; professional communication with stakeholders.

Responsibilities

• Monitor client channels and respond to security questionnaire requests.
• Create and manage tickets in Jira, Linear, or other systems to track requests.
• Complete vendor security questionnaires through spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop understanding of each client's security posture, controls, and tech environment.
• Maintain and improve client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and SMEs for clarifications.
• Escalate gaps or missing controls impacting questionnaire responses.
• Ensure timely and accurate questionnaire completion.

Skills

GRC/Compliance

Vendor risk management

Security questionnaires

SOC 2 knowledge

ISO 27001 knowledge

English proficiency

Organization skills

Communication

Security concepts

Tools

Jira

Linear

OneTrust

Whistic

SecurityScorecard

Job description

Scale Up Recruiting Partners is hiring a Vendor Security Questionnaire Specialist to own the end-to-end questionnaire process for multiple client accounts. You will engage with U.S.-based startups, monitor requests in Slack, and coordinate with technical stakeholders to deliver accurate responses on time.

The role requires experience in GRC/compliance, knowledge of SIG/CAIQ, and familiarity with SOC 2 and ISO 27001, with strong written and verbal English to communicate across diverse