Senior GRC Analyst - IT Security and Compliance

Vertiv Group Corporation; Mandaluyong; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Vertiv is seeking a Governance, Risk, and Compliance Analyst II in the Philippines to drive risk assessments, security reviews, and compliance initiatives across IT security. You will coordinate risk ownership, monitor mitigations, and support audit readiness while collaborating with cross-functional teams.

The role requires a strong background in GRC, IT risk management, and information security, with experience using leading GRC platforms.

Qualifications

• Bachelor's degree in information systems, cybersecurity, or related field.
• 5+ years of experience in GRC, IT risk management, or information security.
• Knowledge of ITGC, SOX, ISO 27001, NIST CSF, and data privacy regs (HIPAA, GDPR).

Responsibilities

• Lead IT risk assessments and mitigation planning.
• Oversee risk register updates and coordinate with risk owners.
• Drive third-party risk reviews and assessments using OneTrust and SecurityScorecard.
• Conduct contract reviews focused on information security terms.
• Respond to customer security questionnaires with input from SMEs using Loopio.
• Supervise compliance training rollouts (e.g., phishing campaigns, security awareness).
• Review and update IT security policies and standards aligned with ISO 27001 and NIST CSF.
• Generate and present GRC dashboards and KPIs to leadership.
• Act as escalation point for GRC inquiries and exceptions.
• Mentor junior analysts and develop SOPs and playbooks.

Skills

GRC experience

IT risk management

Info security

Audit readiness

Education

Bachelor's degree in information systems or cybersecurity

Tools

ServiceNow GRC

OneTrust

SecurityScorecard

Loopio

Job description

Vertiv is seeking a Governance, Risk, and Compliance Analyst II in the Philippines to drive risk assessments, security reviews, and compliance initiatives across IT security. You will coordinate risk ownership, monitor mitigations, and support audit readiness while collaborating with cross-functional teams.

The role requires a strong background in GRC, IT risk management, and information security, with experience using leading GRC platforms.