Security GRC Analyst

FirstMile Ventures; Manila; On-site; PHP 600,000 - 840,000; Full time

Benefits offered by this job

20 Annual Leaves

10 additional days of bonus leave

Private Health Insurance

Learning and development programs

Donation matching program

Job summary

Pax8 is looking for a Security GRC Analyst in the Philippines, based in Makati City. This hybrid role involves supporting governance, risk, and compliance efforts. Responsibilities include gathering documentation, managing compliance activities, and using AI tools effectively.

You will enhance operational reliability and support audit readiness while enjoying benefits such as annual leaves and health insurance. This position offers a chance for significant professional growth within a dynamic environment.

Qualifications

• Experience in governance, risk and compliance or audit within a technology environment.
• Knowledge of standards like ISO 27001 and SOC 2.
• Strong written communication skills.

Responsibilities

• Gather and validate evidence for security and compliance programmes.
• Manage governance, risk and compliance activities.
• Produce operational metrics to identify process improvements.

Skills

Governance, risk and compliance

Security compliance

Audit knowledge

Documentation skills

AI tools usage

Job description

Join Pax8 in the Philippines as a Security GRC Analyst, helping strengthen trust, governance, risk and compliance across a fast-moving cloud marketplace.

This is a hybrid role based in Makati City, with the first 6 months spent in the office and working hours of 10 pm– 7 am Manila time. The wider role setup is aligned to the Philippines night shift model.

Shape trust at scale. This is a brilliant opportunity to step into a broad security role where you’ll build real expertise across governance, risk, compliance, partner assurance and audit readiness. You’ll work at the centre of a growing global business, helping teams stay audit‑ready while also improving how work gets done through smarter processes and practical use of AI tools. For someone who enjoys variety, ownership and learning quickly, this role offers genuine room to grow while new technology and new ways of working continue to evolve around you.

What you’ll be doing

• Keep our audit and assessment activity moving by gathering, organising and validating evidence for key security and compliance programmes, while working closely with stakeholders across the business.
• Manage the day‑to‑day rhythm of governance, risk and compliance activity, including maintaining the Trust Center, supporting partner assurance requests and helping track risks and action plans through to completion.
• Own the security exception workflow, reviewing business context, coordinating with colleagues and helping create a reliable, scalable process around approvals, tracking and follow‑up.
• Partner with teams across the organisation to strengthen control implementation, improve documentation and encourage practical, sustainable ways of working.
• Produce clear operational metrics and use them to help the team see what is working, where friction exists and where processes can improve.
• Use AI tools thoughtfully to accelerate documentation, drafting, evidence collection and analysis without losing quality or clarity.

Why this role matters

Compliance is one of the ways Pax8 earns trust with customers, partners and the wider market. In this role, your work helps keep that trust visible and credible. You’ll make audits smoother, improve operational reliability, support partner‑facing assurance activity and help create stronger foundations for the future of security at Pax8.

What you’ll bring

• Reasonable experience in governance, risk and compliance, security compliance, or internal or external audit within a technology‑led environment.
• Practical knowledge of standards and audit activity such as ISO 27001 and SOC 2, with confidence handling evidence, documentation and follow‑through.
• A self‑starting, independent approach with the ability to structure work, build project plans and keep momentum across multiple priorities.
• Clear, polished written communication and the judgement to tailor information for different audiences.
• Confidence working across different teams, building relationships and navigating situations where stakeholders may need support or challenge.
• Comfort using AI tools to improve productivity and quality in documentation and analysis.
• An interest in cloud, software or consultancy environments, where pace is high and curiosity matters.

Benefits

• 20 Annual Leaves (accruing monthly)
• Pax8 offers an additional 10 days of bonus leave every year!
• In addition to the above, we offer all our employees Private Health Insurance. Beneficial for when life happens!
• Unlimited growth through our learning & development programs in an environment that fosters internal promotions, helping you gain the necessary skills to reach the next step in your professional journey!
• Connecting with our community is important – which is why we have our donation matching program, DEI events, and our employee resource groups to ensure everyone feels at home at Pax8.

Equal opportunities

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: https://www.pax8.com/en-us/terms/job-applicant-privacy-notice/