Sr Technology GRC Advisor

Realpage; Pasig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Realpage is seeking a Senior Technology GRC Advisor to partner with leadership in delivering risk and compliance programs across advisory services, risk registers, and policy governance. You will work with AI-assisted workflows to accelerate evidence gathering and control narratives while ensuring accuracy.

Responsibilities include leading technology risk assessments, advising stakeholders, maintaining the risk register, and performing control testing for SOC 2, PCI DSS, and SOX ITGC programs.

Qualifications

• Bachelor’s degree in IT, cybersecurity, risk management, finance or related field.
• 4+ years in GRC, technology risk, IT audit, or compliance.
• Familiar with NIST CSF 2.0, COBIT 2019, COSO ERM, ISO 31000.
• Experience using AI-assisted tools to draft risk/control content.
• Cloud/hybrid experience with AWS or Azure.

Responsibilities

• Lead or support technology risk assessments and report risk reduction progress.
• Assess SOX ITGCs, SOC 1, SOC 2, PCI DSS, NYDFS control expectations.
• Maintain risk registers and ensure risk ownership and closure.
• Support policy governance, reviews, and exceptions.
• Use AI-assisted workflows to accelerate evidence collection and validation.
• Perform control testing and evidence collection for SOC 2, PCI DSS, SOX.

Skills

Risk assessment

Policy governance

Advisory support

Documentation

Education

Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, Finance, or related field

Tools

ServiceNow IRM

AuditBoard

OneTrust

Vanta

Drata

Job description

Job Description:

Overview

This role reports into Technology GRC leadership and supports delivery across Advisory Services, the enterprise Risk Register, and Policy Governance. The Senior Technology GRC Advisor executes risk and compliance activities with a high degree of independence and contributes to maturing the teams processes and documentation. The role partners with AI agents in a human-in-the-loop model, using AI-assisted workflows to accelerate evidence gathering, risk documentation, and control narratives while validating outputs for accuracy.

Responsibilities

Technology Risk Assessments

• Lead or support technology risk assessments to identify, assess, and manage risks, including effective data-driven reporting and tracking of risk reduction activities.
• Execute risk assessments across SOX ITGCs, SOC 1, SOC 2, PCI DSS and NYDFS control expectations.
• Plan and conduct risk assessments to identify, quantify, and prioritize technology risks.
• Translate assessment outputs into actionable treatment plans, control improvements, and executive risk narratives.

Advisory Services

• Provide cross-functional risk and control guidance on process improvement, post-implementation reviews, and remediation activities.
• Support stakeholders in interpreting requirements and embedding controls into business processes.

Risk Register

• Maintain Risk Register entries across assigned technology domains, ensuring risks are documented, owned, risk-rated, and tracked through closure.

Policy Governance

• Support policy authoring, review cadence, and exception intake, keeping policies aligned to regulatory and industry frameworks.

AI-Augmented Delivery

• Use AI-assisted workflows (human-in-the-loop) to accelerate evidence collection, risk documentation, and control narratives, validating AI output for accuracy and confidentiality.

Control Testing & Evidence

• Perform control testing and evidence collection for SOC 2, PCI DSS, and SOX ITGC programs, mapping findings to applicable framework requirements.

Qualifications

• Bachelors degree in Information Technology, Cybersecurity, Risk Management, Accounting, Finance, or a related field.
• Minimum 4+ years in GRC, technology risk, IT audit, or compliance.
• Solid working knowledge of risk registers, policy governance, and advisory support within a regulated or SaaS environment.
• Working proficiency with AI-assisted tools to draft and review risk and control content, with judgment on when to validate.
• Familiarity with NIST CSF 2.0, COBIT 2019, COSO ERM, and ISO 31000.
• Strong written communication and attention to detail.
• Relevant certifications preferred (e.g., CRISC, CISA, or progress toward them).
• Working experience with GRC tooling (e.g., ServiceNow IRM, AuditBoard, OneTrust, Vanta, Drata) and control testing/evidence collection.
• Familiarity with cloud/hybrid environments (AWS, Azure) and major frameworks (SOC 2, PCI DSS, ISO 27001, NIST CSF 2.0).
• Preferred experience in the Property Management, Multifamily Housing, SaaS, FinTech, or PropTech industries.

Requirements: