Senior GRC & Security Assurance Analyst

Bricoleur Technologies Pty; Pasig; A distancia; PHP 1.200.000 - 2.000.000; Jornada completa

Descripción de la vacante

Bricoleur Technologies Pty is seeking a Senior Security GRC Analyst to drive comprehensive information security governance for global clients. You will manage security questionnaires, vendor risk assessments, and RFP responses, coordinating across departments to deliver accurate assurance evidence.

You will maintain the ISMS calendar, oversee audits, and advance GDPR, SOC 2, and ISO 27001 programs, leveraging AI tools while ensuring compliance and risk controls.

Formación

• 5+ years of experience in Information Security GRC, IT Risk, IT Audit, or Security Operations with ISO 27001 certification experience.
• Knowledge of ISO 27001, SOC 2 and GDPR; regulatory experience in financial services is a plus.
• Desirable certifications: ISO 27001 Lead Implementer/Auditor, CISA, CRISC, or CISM.
• Familiarity with MITRE ATT&CK, OWASP Top 10, CIS Benchmarks, and NIST frameworks is a plus.
• Experience with third-party risk management, vendor risk questionnaires, RFPs, and cross-functional coordination.
• Proficiency with AWS, M365/Entra ID, and Intune; ability to review security evidence and identify gaps.
• Ability to script in Python/SQL/PowerShell for security data analysis is a plus.
• Strong English communication and knowledge sharing mindset.

Responsabilidades

• Manage client security due diligence end to end including security questionnaires, vendor risk assessments, RFPs and assurance requests.
• Coordinate cross-functional stakeholders to deliver accurate, timely responses.
• Maintain client security records covering obligations, evidence, and commitments.
• Develop a central assurance library with standard responses, evidence packs, policies, and certifications.
• Use AI tools to streamline assurance workflows while verifying outputs before use.
• Support AI governance, data sharing restrictions, and risk registers.
• Oversee ISO 27001 ISMS calendar, policies, reviews and approvals.
• Maintain information security risk register and quarterly risk reviews.
• Drive compliance in Vanta, GDPR, ISO 27001 and SOC 2 readiness milestones.
• Coordinate GDPR data subject request processes with Legal and COO.
• Coordinate audits and post-audit actions; liaise with auditors and collect evidence.
• Manage third-party security risk and ongoing monitoring.
• Support secure product development with threat modelling and security reviews.

Conocimientos

ISO 27001 knowledge

SOC 2 familiarity

GDPR knowledge

Security certifications

MITRE ATT&CK

Vanta/Drata experience

Vendor due diligence

AWS security

Intune/M365 Entra ID

Python/SQL/PowerShell

English communication

Herramientas

Vanta

Drata

Secureframe

Descripción del empleo

Bricoleur Technologies Pty is seeking a Senior Security GRC Analyst to drive comprehensive information security governance for global clients. You will manage security questionnaires, vendor risk assessments, and RFP responses, coordinating across departments to deliver accurate assurance evidence.

You will maintain the ISMS calendar, oversee audits, and advance GDPR, SOC 2, and ISO 27001 programs, leveraging AI tools while ensuring compliance and risk controls.