SOC 2 Readiness & Security GRC Analyst

RBox International Solutions Inc.; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

RBox International Solutions Inc. is seeking a Security GRC Analyst to support IT governance, risk, and compliance. This role centers on SOC 2 readiness and remediation while operating the security program across Microsoft 365, Azure, and internal platforms.

You will work closely with engineering, IT admins, and business teams to strengthen controls, investigate alerts, and help mature the organization’s security posture over time.

Qualifications

• 4 to 6 years experience in IT governance, GRC, security operations, or IT risk management.
• Experience supporting SOC 2, ISO 27001, or similar security frameworks.
• Experience investigating security alerts or supporting incident response activities.
• Working knowledge of identity and access management, vulnerability management, and security monitoring processes.
• Familiarity with Microsoft 365 security features, Entra ID, and Azure environments.
• Strong documentation, investigation, and communication skills.

Responsibilities

• Monitor and triage alerts from MDR and other security monitoring tools.
• Investigate suspicious activity or unusual behavior/patterns.
• Document investigation findings, coordinate remediation actions with IT and engineering teams.
• Support root cause analysis and corrective actions following security incidents.
• Maintain investigation records and evidence to support security monitoring controls.
• Assist with remediation of SOC 2 control gaps and readiness activities for the upcoming audit.
• Map remediation tasks to SOC 2 control objectives and track implementation progress in Azure DevOps.
• Draft, revise, and operationalize policies and SOPs related to information security and governance.
• Maintain the control library, RACI assignments, and governance review calendar in SharePoint.
• Assist with insider risk monitoring and improvements in monitoring, detection, and response processes.

Skills

Security operations

Governance

Incident investigation

Documentation

Communication

Tools

Azure DevOps

Microsoft 365 security

Entra ID

Job description

RBox International Solutions Inc. is seeking a Security GRC Analyst to support IT governance, risk, and compliance. This role centers on SOC 2 readiness and remediation while operating the security program across Microsoft 365, Azure, and internal platforms.

You will work closely with engineering, IT admins, and business teams to strengthen controls, investigate alerts, and help mature the organization’s security posture over time.