GRC Analyst: Policy, Risk & CAPA Orchestrator

Medium; Manila (AR); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Healthcare Insurance

16 Paid Time Offs

8 Compensatory Time Offs

Learning & Development opportunities

Team outings

Job summary

MyPass Global is hiring a GRC Analyst to support policy, risk, CAPA, and ISMS governance across our third-party and internal controls. You will coordinate with stakeholders, manage Drata evidence, and help prepare for ISO audits.

Based in our Cebu IT Park office, you will contribute to training campaigns, system access reviews, and documentation in Confluence while supporting continuous improvement of compliance workflows.

Qualifications

• GRC, risk or compliance roles within an organisation managing information security or regulatory obligations.
• Ability to manage multiple compliance registers (policy, risk, CAPA) simultaneously.
• Experience with GRC platforms like Drata, including control monitoring and evidence management.

Responsibilities

• Policy Register Management: monitor lifecycles, coordinate reviews, publish policies, maintain registers.
• Risk Register Support: coordinate risk reviews, schedule assessments, expedite evidence, report on completion.
• Drata Control Readiness Oversight: monitor readiness, create Jira tickets, manage onboarding/offboarding evidence.
• Third-Party Provider Register Management: maintain provider register, coordinate due diligence, track renewals.
• CAPA Register Management: own CAPA in QT9, collect evidence, present for closure, manage workflows.
• KnowBe4 Training Campaign Support: rollout training campaigns, ensure content validity, report completion.
• System Access Reviews: coordinate rolling reviews, remediate issues with stakeholders.
• Google Workspace Support: guidance on templates and shared drives; analyze needs for structure.
• Project Support: assist Corporate Services initiatives with coordination and status reporting.
• Process Documentation: document SOPs in Confluence and keep current.
• Compliance and Audit Support: assist ISO 27001 certifications and surveillance.

Skills

GRC experience

Stakeholder coordination

Jira usage

Confluence

Drata familiarity

Google Workspace

CAPA management

ISO audits

Analytical thinking

Tools

Jira

Confluence

Drata

Google Workspace

Job description

MyPass Global is hiring a GRC Analyst to support policy, risk, CAPA, and ISMS governance across our third-party and internal controls. You will coordinate with stakeholders, manage Drata evidence, and help prepare for ISO audits.

Based in our Cebu IT Park office, you will contribute to training campaigns, system access reviews, and documentation in Confluence while supporting continuous improvement of compliance workflows.