GRC Compliance Analyst

**Schedule: Monday to Friday (6AM to 3PM MNL)

What will you do?**

• Contribute to the development and maintenance of, and monitor the level of compliance to, security frameworks for public and hybrid cloud environments (e.g., AWS, Azure, GCP, SAAS) ensuring adherence to regulatory, industry, and internal security requirements.
• Conduct compliance assurance activities including gap assessments, evidence collection, and audit readiness for security controls.
• Contribute to the development of risk metrics, compliance dashboards, and reporting to senior stakeholders, ensuring visibility of posture, tool maturity, and control effectiveness across Officeworks environments (e.g. cloud governance, vulnerability management).
• Provide assurance of cyber security tooling maturity by evaluating SIEM, SOAR, CSPM, endpoint, and identity security control implementation against security best practice standards.
• Assess our Cyber metrics on a quarterly basis with identified subject matter experts (SMEs) and assist in reporting these to management.
• Assist in providing documentary evidence of control implementation and maturity level during audits and assessments.

What are we looking for?

• Bachelor's degree in Information Security, Information Systems, or related discipline—or equivalent practical experience.
• Experience in IT/Cyber GRC, audit, or risk management within cloud-centric environments.
• Working knowledge of common frameworks and standards such as ISO/IEC 27001, NIST CSF, CIS Controls/Benchmarks, and cloud-specific control catalogues (e.g., CSA CCM).
• Familiarity of AWS, Azure, and/or GCP security services and shared-responsibility models.
• Demonstrated ability build compliance and risk dashboards and tell a clear story to senior stakeholders.
• Strong Excel skills: experience with BI/visualisation tools (e.g., Power BI) is a plus.
• Strong stakeholder engagement, able to collaborate with SMEs across security operations, cloud platforms, identity, and engineering
• Clear written and verbal communication with the ability to translate technical control details for non-technical audiences.
• Proactive mindset with a continuous-improvement approach to control design, monitoring, and evidence automation.
• Relevant certifications (preferred but not mandatory) such as: ISO 27001 Lead Implementer/Lead Auditor, CISA, CISM, CRISC, CCSK/CCSP, AWS/Azure/GCP certifications

Join the awesome team and enjoy these benefits & perks:

• Hybrid Work Arrangement

• Medical, Dental Coverage and Life insurance from day 1 of employment with 2 HMO dependents

• Paid Vacation and Sick Leave (with Quarterly Sick Leave Conversion)

• Competitive salary package and annual appraisal

• Financial Assistance Program

• Mandatory Government Benefits and 13th Month Pay

• Complimentary Sleeping Quarters, Coffee at no cost

• Complimentary Office Fitness and Wellness Facilities at no cost

• Regular Company Events, Work Life Balance, and Career growth opportunities

• Accessible location at the heart of Metro Manila --- the Mega Tower, EDSA

JOIN CONNECTOS NOW

ConnectOS is certified as a Great Place to Work and is a top-rated Philippines employer of choice.

We're a leading provider of offshore talent for organizations worldwide and one of the fastest-growing offshoring

companies in the world. With over a decade of experience, we specialize in premium resourcing and productivity

solutions. in the world. Founded by our Australian CEO, we help companies across industries overcome resourcing

challenges with innovative strategies.

Equal Employment Statement

Employment decisions at ConnectOS will be conducted without consideration of factors such as age', race, color,

religion, gender, disability status, sexual orientation, gender identity or expression, genetic information, and marital

status. ConnectOS ensures the full confidentiality of the data it processes