FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Security Governance, Risk & Compliance (GRC) frameworks, including ISO 27001, SOC 2, and GDPR, with a strong focus on risk assessment, security control implementation, and compliance monitoring. Proven ability to lead cross-functional teams and manage audits while delivering training and awareness programs to enhance organizational security posture.
Highest-signal resume keywords
Security Governance, Risk & ComplianceISO 27001SOC 2Risk AssessmentAudit Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Control ImplementationGRC FrameworksCompliance MonitoringRisk-Based ThinkingKPI MonitoringDocumentation SkillsAnalytical SkillsOrganizational SkillsITIL ProcessesBusiness Continuity Testing
Soft Skills
Strong Communication SkillsAttention to DetailProactive MindsetAbility to Manage Multiple PrioritiesCollaboration Skills
Tools & Technologies
IT Service ManagementPhishing SimulationsCompliance EducationChange ManagementEvidence Collection Tools
Industry Keywords
GDPRNIST 800-53CIS ControlsTelecommunicationsFinanceHealthcare
Tech Stack
Tools & technologiesITSM
About the role
Key responsibilities & impact- Support the development, implementation, and maintenance of GRC frameworks including ISO 27001, SOC 2, and GDPR
- Conduct risk assessments, design and validate security controls, monitor compliance, and evaluate third-party security
- Manage internal and external audits, including preparation, evidence collection, reporting, and remediation planning
- Lead security control implementation with cross-functional teams and advise stakeholders on control adoption
- Maintain policies, procedures, and control documentation according to global standards
- Collaborate with Privacy/Legal on data protection and facilitate privacy impact assessments
- Facilitate Business Impact Assessments and oversee Business Continuity testing and updates
- Monitor and report Security GRC metrics to identify risks and improvement opportunities
- Support change management to maintain security and compliance with minimal disruption
- Coordinate IT, Security, and Compliance teams to align service delivery with regulatory requirements
- Deliver training and awareness programs, including phishing simulations and compliance education
- Recommend and implement process improvements to reduce risk and improve operational efficiency
- Collaborate with cross-functional teams across global geographies
- Report to the Global Manager of Info Sec & GRC
Requirements
What you’ll need- 5+ years of hands-on experience in Security Governance, Risk & Compliance
- Direct responsibility for leading the design, implementation, and ongoing operation of security controls
- Strong hands-on experience with SOC 2
- Knowledge of GRC frameworks such as ISO 27001, NIST 800-53, CIS Controls, and GDPR
- Experience applying GRC frameworks to security control implementation
- Proven experience managing audit preparation and evidence for internal and external audits
- Ability to identify, assess, and prioritize risks using risk-based thinking and sound judgment
- Skilled at monitoring security and compliance performance through KPIs, SLAs, and OLAs
- Strong documentation, analytical, and organizational skills, with attention to detail
- Ability to manage multiple priorities and deadlines in a fast-paced, global environment
- Strong communication skills and ability to explain technical and compliance concepts to non-technical audiences
- Experience working cross-functionally with IT, security, compliance, and business teams across geographies
- Familiarity with ITIL processes: incident, problem, change, request, and asset/configuration management
- Proactive mindset with a commitment to integrity, confidentiality, and continuous learning
- Preferred: experience with IT Service Management, systems administration, and regulated industries such as telecommunications, finance, and healthcare
- Must live in and be authorized to work in the Philippines
- Position is not eligible for relocation or sponsorship
- Ability to support core hours typically 8pm to 5am local time
- Ability to travel fewer than five times per year to international offices if required
Benefits
Comp & perks- Competitive industry salaries with annual reviews
- Health Insurance (HMO with 2 free dependents)
- Generous Paid time off
- Company retirement plan
- 13th month pay
- Employee of the Quarter program with a monetary award
- Employee of the Year includes a 7-day vacation package to the Caribbean
- Regional team-building gatherings throughout the year
- Training, professional development and career growth opportunities
- BCM One Gives Back Program
- Emergency Fund
- Diverse and inclusive workforce and environment
- Flexible support for international teams
- Remote work arrangement