Senior GRC Analyst: IT Risk, Audit & Compliance Lead

Permhunt; Metro Manila; On-site; PHP 781,200 - 1,116,000; Full time

Benefits offered by this job

Competitive salary

Benefit package

On-call support

Job summary

Permhunt is looking for a Senior GRC Analyst based in Mandaluyong, NCR, to support governance, risk, and compliance initiatives. You will play a crucial role in conducting IT risk assessments, managing third-party risks, and leading audit activities, all while enhancing the company's security posture.

The ideal candidate possesses at least 5 years of relevant experience and is familiar with ISO 27001, NIST, and COBIT. This position involves collaborating with cross-functional teams and mentoring junior members.

Qualifications

• Minimum 5 years of experience in IT risk management, audit coordination, and security compliance.
• Strong working knowledge of ISO 27001, NIST, and COBIT frameworks.
• Experience with SOC audits and Third-Party Risk Management activities.

Responsibilities

• Conduct IT risk assessments and manage risk reporting activities.
• Manage third-party security assessments and oversee TPRM program.
• Lead internal and external audit activities ensuring regulatory compliance.

Skills

IT risk management

Audit coordination

Security compliance

Analytical skills

Stakeholder management

Education

Bachelor's degree or equivalent professional experience

Tools

ServiceNow

OneTrust

SecurityScorecard

Job description

Permhunt is looking for a Senior GRC Analyst based in Mandaluyong, NCR, to support governance, risk, and compliance initiatives. You will play a crucial role in conducting IT risk assessments, managing third-party risks, and leading audit activities, all while enhancing the company's security posture.

The ideal candidate possesses at least 5 years of relevant experience and is familiar with ISO 27001, NIST, and COBIT. This position involves collaborating with cross-functional teams and mentoring junior members.