Senior GRC Leader: Risk, Audit & Compliance

Permhunt; Metro Manila; On-site; PHP 1,000,000 - 1,600,000; Full time

Job summary

Permhunt is seeking a Senior Governance, Risk and Compliance Analyst to drive enterprise-wide governance, risk, and compliance initiatives across a global environment. You will lead IT risk assessments, third-party risk management, and audits, collaborating with IT, Legal, Procurement, and business stakeholders to strengthen the security posture and ensure regulatory alignment.

The role involves risk documentation, remediation engagement, and mentoring junior analysts, with a focus on ISO 27001,

Qualifications

• Bachelor's degree or equivalent professional experience.
• At least 5 years of IT risk management, audit coordination, and security compliance experience.
• Strong knowledge of ISO 27001, NIST SP 800-53, NIST CSF, and COBIT.
• Experience supporting SOC 1, SOC 2, SOC 3, and ISAE 3402 audits and reporting.
• Experience managing Third-Party Risk Management (TPRM) activities.
• Familiarity with regulatory/privacy requirements including SOX, HIPAA, and GDPR.
• Hands-on experience with GRC platforms such as ServiceNow, OneTrust, and SecurityScorecard.
• Strong analytical, reporting, problem-solving, and stakeholder management skills.
• Ability to manage priorities while mentoring junior team members.

Responsibilities

• Conduct and lead IT risk assessments, mitigation planning, control reviews, and risk reporting.
• Maintain and oversee risk documentation; ensure accuracy and stakeholder alignment.
• Identify, track, and manage risks, issues, and remediation through to resolution.
• Monitor GRC metrics, dashboards, and KPIs to evaluate compliance performance.
• Review and manage IT exception/exemption requests through ServiceNow.
• Lead third-party security assessments and mature the TPRM program.

Skills

IT risk management

Audit coordination

Security compliance

GRC platforms

TPRM

ISO/NIST/COBIT

SOC audits

Regulatory/privacy (SOX HIPAA GDPR)

Education

Bachelor's degree or equivalent

Tools

ServiceNow

OneTrust

SecurityScorecard

Job description

Permhunt is seeking a Senior Governance, Risk and Compliance Analyst to drive enterprise-wide governance, risk, and compliance initiatives across a global environment. You will lead IT risk assessments, third-party risk management, and audits, collaborating with IT, Legal, Procurement, and business stakeholders to strengthen the security posture and ensure regulatory alignment.

The role involves risk documentation, remediation engagement, and mentoring junior analysts, with a focus on ISO 27001,