GRC Specialist – Governance, Risk, and Compliance

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Assist in developing, implementing, and maintaining GRC frameworks such as ISO 27001, SOC 2, and GDPR.

• Perform risk assessments, design and validate security measures, monitor compliance, and assess third-party security.

• Oversee internal and external audits, including preparation, evidence gathering, reporting, and remediation planning.

• Direct the implementation of security controls alongside cross-functional teams and provide guidance to stakeholders on control adoption.

• Update and maintain policies, procedures, and control documentation in alignment with global standards.

• Work in conjunction with Privacy/Legal teams on data protection matters and conduct privacy impact assessments.

• Lead Business Impact Assessments and manage Business Continuity testing and updates.

• Track and report Security GRC metrics to pinpoint risks and identify opportunities for improvement.

• Aid in change management efforts to ensure security and compliance are upheld with minimal disruption.

• Collaborate with IT, Security, and Compliance teams to ensure service delivery meets regulatory standards.

• Provide training and awareness initiatives, including phishing simulations and compliance education.

• Suggest and implement process improvements to mitigate risks and enhance operational efficiency.

• Collaborate with cross-functional teams across global locations.

• Report directly to the Global Manager of Info Sec & GRC.

⛳️ Requirements

• Over 5 years of practical experience in Security Governance, Risk & Compliance.

• Directly responsible for the design, implementation, and ongoing operation of security controls.

• Extensive hands-on experience with SOC 2.

• Familiarity with GRC frameworks such as ISO 27001, NIST 800-53, CIS Controls, and GDPR.

• Experience in applying GRC frameworks to the implementation of security controls.

• Proven track record in managing audit preparations and evidence for both internal and external audits.

• Capable of identifying, assessing, and prioritizing risks utilizing risk-based thinking and sound judgment.

• Proficient in monitoring security and compliance performance using KPIs, SLAs, and OLAs.

• Strong documentation, analytical, and organizational skills, with a keen eye for detail.

• Ability to juggle multiple priorities and deadlines in a dynamic, global environment.

• Excellent communication skills with the ability to convey technical and compliance concepts to non-technical audiences.

• Experience working across various functions with IT, security, compliance, and business teams globally.

• Knowledge of ITIL processes: incident, problem, change, request, and asset/configuration management.

• Proactive attitude with a commitment to integrity, confidentiality, and ongoing learning.

• Preferred: experience in IT Service Management, systems administration, and regulated sectors like telecommunications, finance, and healthcare.

• Must reside in and be authorized to work in the Philippines.

• This position does not offer relocation or sponsorship.

• Availability to support core hours typically from 8 PM to 5 AM local time.

• Willingness to travel fewer than five times a year to international offices if necessary.

🏝️ Benefits

• Competitive industry salaries with annual reviews.

• Health Insurance (HMO covering 2 free dependents).

• Generous paid time off.

• Company-sponsored retirement plan.

• 13th month pay.

• Employee of the Quarter program with a monetary reward.

• Employee of the Year receives a 7-day vacation package to the Caribbean.

• Regional team-building events throughout the year.

• Opportunities for training, professional development, and career advancement.

• BCM One Gives Back Program.

• Emergency Fund.

• Diverse and inclusive workforce and work environment.

• Flexible support for international teams.

• Remote work arrangement.