Discover your 100% YOU with MicroSourcing!
Position: Lead GRC Associate
Location: Eastwood City, Quezon City
Work setup & shift: Hybrid | Night shift
Why join MicroSourcing
You'll Have
Competitive Rewards: Enjoy above-market compensation, healthcare coverage on day one, plus one or more dependents, paid time-off with cash conversion, group life insurance, and performance bonuses
A Collaborative Spirit: Contribute to a positive and engaging work environment by participating in company-sponsored events and activities.
Work-Life Harmony: Enjoy the balance between work and life that suits you with flexible work arrangements.
Career Growth: Take advantage of opportunities for continuous learning and career advancement.
Inclusive Teamwork: Be part of a team that celebrates diversity and fosters an inclusive culture.
Your Role
The Lead GRC Associate will support the organization's Governance, Risk, and Compliance (GRC) programs by managing IT risk assessments, compliance initiatives, control frameworks, and security governance activities. This role will partner with Information Security, IT, Internal Audit, and business stakeholders to identify technology risks, strengthen internal controls, maintain compliance readiness, and drive remediation efforts.
The Lead GRC Associate will support regulatory and industry compliance requirements, including SOX and SOC programs, by ensuring IT processes and controls are properly documented, monitored, and continuously improved.
Key Responsibilities
- Manage and support IT governance, risk, and compliance activities across business and technology functions.
- Perform IT risk assessments to identify potential risks, control gaps, and areas requiring remediation.
- Maintain and improve IT policies, standards, procedures, and control documentation.
- Support compliance programs such as SOX, SOC, ISO 27001, and other applicable security and regulatory frameworks.
- Coordinate with process owners to ensure compliance requirements are understood and effectively implemented.
- Monitor control activities and collaborate with stakeholders to address identified risks and compliance gaps.
- Support audit readiness activities by coordinating documentation, evidence collection, and responses with relevant teams.
- Track remediation activities, risk acceptance, and corrective action plans to ensure timely closure of identified issues.
- Partner with IT teams during system implementations and process changes to assess governance and compliance requirements.
- Evaluate technology processes and recommend improvements to strengthen security, operational effectiveness, and compliance posture.
- Assist in preparing risk reports, compliance dashboards, and management updates.
- Communicate security risks, compliance requirements, vulnerabilities, and mitigation strategies to technical and business stakeholders.
- Support continuous improvement initiatives related to IT controls, governance processes, and risk management practices.
Qualifications
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Accounting, Internal Audit, or related field.
- 8+ years with CPA required
- 3+ years of experience in Governance, Risk, and Compliance (GRC), IT Risk, Information Security Compliance, Technology Risk, or related fields.
- Experience supporting IT compliance programs, risk assessments, control frameworks, and remediation activities.
- Familiarity with SOX, SOC, ITGC, ISO 27001, NIST, or similar compliance requirements.
- Experience working with audit, risk, or compliance management tools (e.g., AuditBoard, ServiceNow GRC, Archer, OneTrust, TeamMate+).
Preferred Qualifications/Nice To Have
- Strong understanding of IT governance, risk management, and compliance concepts.
- Knowledge of security frameworks and compliance standards such as SOX, SOC, ISO 27001, NIST, or COBIT.
- Experience collaborating with internal audit, external audit, security, and technology teams is preferred.
- Big 4 Technology Risk, IT Audit, or Risk Advisory experience is an advantage.
- Strong analytical skills with the ability to identify risks and recommend practical solutions.
- Excellent communication skills with the ability to work with technical and non-technical stakeholders.
- Strong documentation, organization, and project coordination skills.
- Ability to manage multiple compliance activities and prioritize deadlines.
- Detail-oriented with strong problem-solving capabilities.
About MicroSourcing
With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.
Our commitment to 100% YOU
MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.
At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!
For more information, visit https://www.microsourcing.com/
