Lead GRC Associate

Job Description:

Discover your 100% YOU with MicroSourcing

Position: Lead GRC Associate

Location: Eastwood City, Quezon City

Work setup & shift: Hybrid | Night shift

Why join MicroSourcing?

You’ll Have

Competitive Rewards: Enjoy above-market compensation, healthcare coverage on day one, plus one or more dependents, paid time-off with cash conversion, group life insurance, and performance bonuses

A Collaborative Spirit: Contribute to a positive and engaging work environment by participating in company-sponsored events and activities.

Work-Life Harmony: Enjoy the balance between work and life that suits you with flexible work arrangements.

Career Growth: Take advantage of opportunities for continuous learning and career advancement.

Inclusive Teamwork: Be part of a team that celebrates diversity and fosters an inclusive culture.

Your Role

The Lead GRC Associate will support the organization's Governance, Risk, and Compliance (GRC) programs by managing IT risk assessments, compliance initiatives, control frameworks, and security governance activities. This role will partner with Information Security, IT, Internal Audit, and business stakeholders to identify technology risks, strengthen internal controls, maintain compliance readiness, and drive remediation efforts.

The Lead GRC Associate will support regulatory and industry compliance requirements, including SOX and SOC programs, by ensuring IT processes and controls are properly documented, monitored, and continuously improved.

Key Responsibilities

• Manage and support IT governance, risk, and compliance activities across business and technology functions.
• Perform IT risk assessments to identify potential risks, control gaps, and areas requiring remediation.
• Maintain and improve IT policies, standards, procedures, and control documentation.
• Support compliance programs such as SOX, SOC, ISO 27001, and other applicable security and regulatory frameworks.
• Coordinate with process owners to ensure compliance requirements are understood and effectively implemented.
• Monitor control activities and collaborate with stakeholders to address identified risks and compliance gaps.
• Support audit readiness activities by coordinating documentation, evidence collection, and responses with relevant teams.
• Track remediation activities, risk acceptance, and corrective action plans to ensure timely closure of identified issues.
• Partner with IT teams during system implementations and process changes to assess governance and compliance requirements.
• Evaluate technology processes and recommend improvements to strengthen security, operational effectiveness, and compliance posture.
• Assist in preparing risk reports, compliance dashboards, and management updates.
• Communicate security risks, compliance requirements, vulnerabilities, and mitigation strategies to technical and business stakeholders.
• Support continuous improvement initiatives related to IT controls, governance processes, and risk management practices.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Internal Audit, or related field.
• 8+ years with CPA required
• 3+ years of experience in Governance, Risk, and Compliance (GRC), IT Risk, Information Security Compliance, Technology Risk, or related fields.
• Experience supporting IT compliance programs, risk assessments, control frameworks, and remediation activities.
• Familiarity with SOX, SOC, ITGC, ISO 27001, NIST, or similar compliance requirements.
• Experience working with audit, risk, or compliance management tools (e.g., AuditBoard, ServiceNow GRC, Archer, OneTrust, TeamMate+).

Preferred Qualifications/Nice To Have

• Strong understanding of IT governance, risk management, and compliance concepts.
• Knowledge of security frameworks and compliance standards such as SOX, SOC, ISO 27001, NIST, or COBIT.
• Experience collaborating with internal audit, external audit, security, and technology teams is preferred.
• Big 4 Technology Risk, IT Audit, or Risk Advisory experience is an advantage.
• Strong analytical skills with the ability to identify risks and recommend practical solutions.
• Excellent communication skills with the ability to work with technical and non-technical stakeholders.
• Strong documentation, organization, and project coordination skills.
• Ability to manage multiple compliance activities and prioritize deadlines.
• Detail-oriented with strong problem-solving capabilities.

About MicroSourcing

With over 9,000