Cyber GRC Manager

1 day ago

Taguig, National Capital Region, Philippines YONDU INC. Full time $90,000 - $120,000 per year

The Cyber GRC Manager is responsible for leading the development, implementation, and management of cybersecurity governance, risk, and compliance strategies to support the organization's information security objectives. This role ensures that cybersecurity policies and procedures comply with relevant legal, regulatory, and contractual obligations while aligning with industry best practices and internal business goals.

Key Responsibilities:

Governance:

  • Develop and maintain cybersecurity policies, standards, and procedures.
  • Ensure alignment of cybersecurity strategy with business objectives and regulatory expectations.
  • Drive cybersecurity awareness and training programs across the organization.
  • Coordinate with IT, Legal, and Compliance teams to enforce governance practices.

Risk Management:

  • Conduct risk assessments and control evaluations to identify threats, vulnerabilities, and mitigation strategies.
  • Manage the cybersecurity risk register and oversee risk treatment plans.
  • Facilitate periodic threat modeling and business impact assessments.
  • Report on security risks, trends, and posture to senior leadership.

Compliance:

  • Ensure compliance with applicable laws, standards, and frameworks (e.g., ISO 27001, NIST, GDPR, PCI DSS, HIPAA, etc.).
  • Lead internal and external audits, assessments, and regulatory inspections.
  • Maintain documentation of compliance activities such as audit results, risk assessments, and corrective action plans.
  • Monitor third-party vendor compliance with cybersecurity requirements.

Program Leadership:

  • Develop and manage a GRC program roadmap and maturity model.
  • Drive continuous improvement of the cybersecurity control environment.
  • Implement GRC tools and platforms to streamline governance and reporting.
  • Support incident response and business continuity planning with a compliance lens.

Qualifications:

Education & Certifications:

  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.

  • Certifications preferred: CISSP, CISM, CRISC, CISA, ISO 27001 Lead Auditor/Implementer, or equivalent.

  • Essential certifications: CISSP, CISM, or CRISC

  • Preferred: CISA, ISO 27001 Lead Auditor/Implementer, or equivalent

Experience:

  • Minimum 5–8 years of experience in cybersecurity, IT audit, or risk & compliance roles.
  • Hands-on experience with frameworks and standards such as ISO 27001, NIST CSF, COBIT, and ITIL.
  • Proven experience implementing or managing ISO 27001 ISMS and NIST CSF programmes
  • Experience in regulatory compliance for sectors like BFSI, healthcare, or telecommunications is a plus.
  • Experience with Philippines regulatory requirements (BSP, NPC, or NTC) strongly preferred
  • Familiarity with GRC platforms (e.g., Archer, ServiceNow, LogicGate) is an advantage.

Skills:

  • Strong analytical and problem-solving skills.
  • Excellent communication and stakeholder management skills.
  • Detail-oriented with a structured approach to documentation and reporting.
  • Ability to lead cross-functional teams and influence at all organizational levels.
  • Previous experience managing cybersecurity or compliance teams (2+ direct reports preferred)

  • GRC Consultant

    1 day ago

    Taguig, National Capital Region, Philippines Ingressum Full time ₱900,000 - ₱1,200,000 per year

    We have an exciting Manila-based opportunity available for a GRC Analyst.Fantastic benefits:Highly competitive salary HMO subsidy on commencement15 vacation days per year (5 days reimbursable per year); 7 sick days Annual performance bonuses and incentives Annual salary reviews and increases Company polo shirts About the RoleThe GRC Analyst plays a...

  • Senior Cyber Security Governance Specialist

    5 days ago

    Taguig, National Capital Region, Philippines beBeeCyberSecurity Full time ₱800,000 - ₱1,200,000

    Job OverviewA Mid-Senior Level Cybersecurity Role AwaitsThis opportunity requires a professional with expertise in cyber security governance, risk and compliance principles and practices.Key ResponsibilitiesTo collaborate with business functions to identify critical cyber/data security elements that need to be governed according to policiesTo continuously...

  • SAP Security and GRC

    1 day ago

    Taguig, National Capital Region, Philippines SYSGEN RPO Full time $90,000 - $120,000 per year

    SAP Security and GRC SeniorQualifications:Bachelor's degree in Information Security, Business, or a related field. Relevant certifications (e.g., SAP Certified Application Associate - SAP Access Control 12.0) preferred.With 3-5+ years' experience as an SAP GRC Consultant, with deep expertise in SAP GRC tools and solutions.Strong knowledge of SAP security...

  • Security Consultant- GRC

    1 day ago

    Taguig, National Capital Region, Philippines Satellite Office Full time $90,000 - $120,000 per year

    Role Description and ResponsibilitiesThe Security Consultant will work with the wider Consulting team, responsible for the development and delivery of Governance, Risk and Compliance services. This involves the end-to-end delivery for our customers and to a certain extent, business development. A key part of the role will involve directly engaging customers...

  • Cyber Integration Manager

    1 day ago

    Taguig, National Capital Region, Philippines NCS Group Full time $90,000 - $120,000 per year

    NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 cities, providing consulting, digital services, technology solutions, and more. We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people.Our diverse workforce...

  • Cyber Security Risk Manager

    4 days ago

    Taguig, National Capital Region, Philippines beBeecybersecurity Full time ₱900,000 - ₱1,200,000

    Cyber Security Governance RoleWe are seeking a skilled Cyber Security Governance professional to align with our company's cyber security strategy and ensure compliance with regulations and industry best practices.

  • VP - Tech and Cyber Risk Manager

    4 weeks ago

    Taguig, National Capital Region, Philippines Citigroup Inc. Full time

    Whether you're at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you'll have the opportunity to expand your skills and make a difference at one of the world's most global banks. We're fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure...

  • Chief Cybersecurity Architect

    6 days ago

    Taguig, National Capital Region, Philippines beBeeCybersecurity Full time ₱800,000 - ₱1,200,000

    Cyber Security Solutions ArchitectAre you looking for a challenging role in cybersecurity? We are seeking an experienced Cyber Security Solutions Architect to lead our technical efforts and ensure the secure deployment of our solutions across on-premise or cloud environments.Key ResponsibilitiesLead the technical aspect of cyber security projectsMake key...

  • Cyber Security Expert

    3 days ago

    Taguig, National Capital Region, Philippines beBeeSecurity Full time ₱900,000 - ₱1,200,000

    Technical Cyber Security Auditor PositionThis is a challenging and rewarding role for an experienced Cyber Security Auditor to evaluate and assess the IT infrastructure, systems, and processes of our organization. The successful candidate will be responsible for identifying security vulnerabilities, ensuring compliance with security policies, and...

  • Cyber Security Analyst

    1 day ago

    Taguig, National Capital Region, Philippines beBeeCyberSecurity Full time ₱900,000 - ₱1,200,000

    Unlock Cyber Security ExcellenceElevate your career as a Cyber Security Analyst, responsible for monitoring and managing security operations in a dynamic 24/7 environment. Collaborate with a team of experts to identify and mitigate threats, ensuring the security and integrity of our systems.Key Responsibilities:Manage multiple security technologies to...