Senior GRC Analyst (Cybersecurity)

Location: Manila, Philippines; hybrid workplace

Company

hirify.global develops AV networking media products that manage audio and video channels over a single network.

What you will do

• Conduct information security risk assessments and third-party security assessments against ISMS policies, guidelines, and controls.
• Design and perform internal audits, document findings, and report results to management.
• Manage and maintain a GRC platform for tracking and reporting compliance activities.
• Coordinate with ISO27001 auditors to support successful audits and ongoing certification.
• Own the risk assessment process, including the risk register, information asset register, and incident register.
• Monitor product compliance regulations and standards, assess their impact, and translate obligations into requirements for Engineering, Product, Legal, and Operations.

Requirements

• Bachelor’s degree or industry certifications in cybersecurity, risk management, governance, or a related field.
• 5+ years of direct information security experience focused on governance, risk, and compliance.
• 3+ years of experience preparing for ISO27001 audits and preparing responses with auditors.
• Thorough understanding of ISO27001:2022 and associated guidelines.
• Experience with GRC platforms such as ISMS.online, Vanta, SecureFrame, or similar tools.
• Ability to work independently and collaborate with developers, engineers, business, operations, and external stakeholders.

Nice to have

• CISA, CISSP, or CRISC certification.

Culture & Benefits

• Hybrid work arrangement in Manila.
• Values centered on Excellence, Courage, Integrity, Innovation, and Teamwork.
• Flexible and change-oriented approach with a focus on continuous improvement.