Senior GRC Analyst

Audinate; Philippines; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Flexible working (2 days in office)

Home office support

Volunteering leave

Annual bonus

Equity incentive plan

Job summary

Audinate is seeking a Senior Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team in the Philippines. You will help continuously improve our risk and compliance function to ensure ISO27001 certification while supporting broader security assurance needs.

The ideal candidate will have hands-on experience with ISO27001:2022, risk assessments, third-party security assessments, internal audits and managing a GRC platform.

Qualifications

• Bachelor’s degree or industry certifications in information cybersecurity, risk management, governance, or a related field.
• 5+ years of direct experience in information security, with emphasis on governance, risk and compliance.
• 3+ years of experience preparing for ISO27001 audits and working with auditors.

Responsibilities

• Conduct risk assessments and third-party security assessments to identify gaps.
• Design, implement, and conduct internal audits and report findings to management.
• Manage and maintain a GRC platform to track and report on compliance activities.
• Collaborate with ISO27001 auditors to ensure successful audits and certification.
• Own the risk assessment process including risk register and incident register.
• Monitor regulations and translate obligations into requirements for Engineering, Product, Legal, and Operations.
• Drive continuous improvement across cross-functional teams.

Skills

GRC experience

ISO27001 knowledge

Risk assessment

Auditing

Interpersonal skills

Education

Bachelor’s degree or equivalent in information cybersecurity/risk governance

Tools

ISMS.online

Vanta

SecureFrame

Job description

Find Your Connection to Endless Possibilities

Are you a GRC professional looking for the next step in your career? If the opportunity to work in a global industry leader with a diverse culture excites you, this may be the role for you.

With Audinate, you’ll find your connection to the world of sound and vision.

We lead the world in AV networking media to pioneer the way people see and hear. Our products seamlessly manage hundreds of audio and video channels with one network, making us the industry standard. You’ll find us in the largest companies and institutions like the Sydney Opera House, NFL Media Headquarters, Microsoft, and even a 900-year old cathedral featured in Harry Potter.

Our core values are the foundation of everything we do: Excellence, Courage, Integrity, Innovation, and Teamwork.

If this resonates with you, this is the place for you.

What you’ll experience with us

No matter your role, you’ll feel part of our team and contribute to pioneering the future of AV so that everyone can be seen and heard. In addition to a competitive salary, annual bonus and equity incentive plan you’ll be part of our diverse, values-based culture. You’ll also enjoy a range of benefits such as flexible working (2 days per week in office), home office support, and volunteering leave.

Who we're looking for

We are seeking a Senior Governance, Risk and Compliance (GRC) Analyst to join our Cybersecurity Operations Team. You will help Audinate, and the Cybersecurity team, continuously improve our risk and compliance function to ensure ongoing ISO27001 certification, while also supporting broader security assurance needs.

The ideal candidate will have experience with the ISO27001:2022 standard, risk assessments, third-party security assessments, internal audits, working with external auditors, and managing a GRC platform.

Responsibilities

• Conduct risk assessments and third-party security assessments to identify potential gaps and vulnerabilities against ISMS policies, guidelines and associated controls.
• Design, implement, and conduct internal audits and report audit findings to management.
• Manage and maintain a GRC platform to track and report on compliance activities.
• Work closely with ISO27001 auditors to ensure successful audits and certification.
• Own the risk assessment process including maintaining the risk register, information asset register, and incident register.
• Monitor emerging and evolving product compliance legislation (e.g. EU AI Act, Cyber Resilience Act, Radio Equipment Directive) and standards, assess applicability and impact on Audinate's products and platforms, and translate obligations into requirements for Engineering, Product, Legal and Operations.
• Collaborate with cross-functional teams to address compliance issues and drive continuous improvement efforts
• Stay up to date on the latest regulations, standards and trends in risk and compliance.

Requirements

• Bachelor’s degree or industry certifications in information cybersecurity, risk management, governance, or a related field.
• 5+ years of direct experience in information security, with an emphasis on governance, risk and compliance.
• 3+ years of experience preparing for ISO27001 audits, as well as working with auditors to prepare audit responses.
• Thorough understanding of the ISO27001:2022 standard and associated guidelines.
• Experience with GRC Platforms such as ISMS.online, Vanta, SecureFrame or similar.
• Interpersonal skills (working with developers, engineers, business and operations & external stakeholders)
• Relevant certifications such as CISA, CISSP or CRISC are a plus.
• Ability to work independently and as part of a team
• Agile mentality: flexible, open to change and striving for continuous improvement