GRC Engineer – Level I

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Implement comprehensive client compliance initiatives in accordance with SOC 2, ISO 27001, and relevant regulatory standards.

• Draft and revise corporate security policies, standard operating procedures, and control evidence for audits and assessments.

• Collaborate with technical teams to monitor, assess, and address cybersecurity risks and control deficiencies.

• Monitor compliance milestones, gather evidence, and execute tasks across multiple client engagements simultaneously.

• Engage directly with client stakeholders through email, chat, and video conferencing.

• Collect evidence, clarify control requirements, and provide updates to clients.

• Conduct structured control testing and readiness assessments.

• Work alongside IT, security, and operations teams to develop corrective action plans.

• Revise delivery templates, playbooks, and standard operating procedures.

• Manage active client accounts within the initial 15 days.

• Act as the main point of contact for a designated portfolio of accounts.

• Oversee engagements from start to finish, resolve escalations, and lead a team of analysts.

⛳️ Requirements

• Demonstrated ability to communicate effectively with U.S. clients.

• Strong organizational skills to handle multiple cybersecurity compliance projects at once.

• Practical experience in executing initiatives across SOC 2, ISO 27001, or NIST CSF frameworks within technology-driven cybersecurity settings.

• Familiarity with authoring, implementing, and enforcing corporate cybersecurity policies and control standards.

• Capability to excel in a dynamic startup environment and adapt to changing priorities.

• Excellent written and verbal communication skills in English.

• Hands-on experience with automated compliance solutions like Vanta or similar GRC platforms.

• Knowledge of GDPR, HIPAA, or PCI DSS regulations.

• Possession of recognized certifications such as ISO 27001 Lead Implementer, CISA, or Security+.

• Reliable high-speed internet access.

• A professional home office setup conducive to confidential discussions and seamless collaboration.

• Availability to work from 8:00 AM to 5:00 PM U.S. Eastern Time.

• Willingness and capability to travel locally for occasional onsite meetings, team events, or business-related activities.

• Must participate in live video interviews with the camera on.

• Must verify identity during the recruitment and onboarding process.

• Successful completion of identity verification and background checks, where permissible by law.

• Proficiency in written and spoken English communication.

🏝️ Benefits

• Opportunities for career development, including mentorship and training.

• Reimbursement for approved training and certification courses related to the current position.

• Competitive base salary.

• Regular performance evaluations tied to merit-based promotions.

• Opportunities for bonuses.

• Significant potential for career advancement.

• Remote-first work culture.

• Flexibility to work from any location while collaborating with a global team.