Cyber Governance, Risk and Compliance Specialist

Overview of the RoleThe Cyber Governance, Risk and Compliance (GRC) Specialist supports the organization's information security governance by managing security risks, maintaining the Information Security Management System (ISMS), managing & developing the Cyber awareness program, and ensuring compliance with applicable policies, standards, and regulatory requirements. The role also coordinates risk assessments, audits, governance reporting, and continuous improvement initiatives to strengthen the organization's overall security posture. Responsibilities:Support the implementation, maintenance, and continual improvement of the organization's Information Security Management System (ISMS). Develop, review, and maintain information security policies, standards, procedures, and related governance documentation. Conduct information security risk assessments, develop & maintain the Information Security Risk Register, and monitor the implementation of risk treatment plans. Coordinate internal and external information security audits, track audit findings, and ensure timely remediation of identified issues. Conduct information security due diligence and risk assessments for third-party vendors, suppliers, and service providers. Prepare and present governance reports, risk metrics, compliance dashboards, and management reports for executive leadership and governance committees. Monitor emerging cybersecurity risks, regulatory changes, and industry best practices, and recommend improvements to governance, risk management, and compliance processes. RequirementsMinimum 5 years' experience in Information Security GRC, IT Risk, Information Security, IT Audit, or a related field. Bachelor's degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field. Relevant professional certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or equivalent are highly desirable. Demonstrated experience in developing, implementing, maintaining, and continually improving an Information Security Management System (ISMS), preferably aligned with ISO/IEC 27001. Knowledge of security governance frameworks and standards such as ISO/IEC 27001, ISO 31000, NIST Cybersecurity Framework (CSF), CIS Controls, and applicable data protection and privacy regulations. Experience conducting information security risk assessments, facilitating risk treatment plans, and monitoring risk mitigation activities across the organization. Working knowledge of cybersecurity technologies, security operations, and incident management sufficient to assess risks, review reports, and provide governance oversight. Strong written and verbal communication skills, including the ability to prepare governance reports, policies, executive briefings, and presentations for senior management and governance committees. High level of integrity, professionalism, and commitment to confidentiality and ethical conduct. Benefits500K per incident HMO coverage + Dental & Optical benefits ​2-week paid Christmas vacation​Electricity & Data subsidies​25K Educational Assistance ​Training and equipment will be provided​Fixed Schedule of Mon-Fri from 7 AM to 4 PM​

Overview of the Role

The Cyber Governance, Risk and Compliance (GRC) Specialist supports the organization's information security governance by managing security risks, maintaining the Information Security Management System (ISMS), managing & developing the Cyber awareness program, and ensuring compliance with applicable policies, standards, and regulatory requirements. The role also coordinates risk assessments, audits, governance reporting, and continuous improvement initiatives to strengthen the organization's overall security posture.

Responsibilities:

• Support the implementation, maintenance, and continual improvement of the organization's Information Security Management System (ISMS).

• Develop, review, and maintain information security policies, standards, procedures, and related governance documentation.

• Conduct information security risk assessments, develop & maintain the Information Security Risk Register, and monitor the implementation of risk treatment plans.
• Coordinate internal and external information security audits, track audit findings, and ensure timely remediation of identified issues.
• Conduct information security due diligence and risk assessments for third-party vendors, suppliers, and service providers.
• Prepare and present governance reports, risk metrics, compliance dashboards, and management reports for executive leadership and governance committees.
• Monitor emerging cybersecurity risks, regulatory changes, and industry best practices, and recommend improvements to governance, risk management, and compliance processes.

Requirements

• Minimum 5 years' experience in Information Security GRC, IT Risk, Information Security, IT Audit, or a related field.

• Bachelor's degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field. Relevant professional certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or equivalent are highly desirable.

• Demonstrated experience in developing, implementing, maintaining, and continually improving an Information Security Management System (ISMS), preferably aligned with ISO/IEC 27001.

• Knowledge of security governance frameworks and standards such as ISO/IEC 27001, ISO 31000, NIST Cybersecurity Framework (CSF), CIS Controls, and applicable data protection and privacy regulations.

• Experience conducting information security risk assessments, facilitating risk treatment plans, and monitoring risk mitigation activities across the organization.
• Working knowledge of cybersecurity technologies, security operations, and incident management sufficient to assess risks, review reports, and provide governance oversight.
• Strong written and verbal communication skills, including the ability to prepare governance reports, policies, executive briefings, and presentations for senior management and governance committees.
• High level of integrity, professionalism, and commitment to confidentiality and ethical conduct.

Benefits

• 500K per incident HMO coverage + Dental & Optical benefits ​
• 2-week paid Christmas vacation​
• Electricity & Data subsidies​
• 25K Educational Assistance ​
• Training and equipment will be provided​
• Fixed Schedule of Mon-Fri from 7 AM to 4 PM​

ABOUT USVBP is an Australian company with operations in the Philippines that provides business growth, consulting, and delivery capabilities to more than 260 of the most innovative and disruptive financial services firms across Australia.Our consulting-led approach leverages services in strategy, process improvement, intelligent automation, data analytics, and operations. We specialise in supporting financial firms, accounting practices, and mortgage brokers.HOW WE STARTEDIn 2013, VBP embarked on a visionary journey to transform how advice is delivered in Australia. From humble beginnings, we steadily evolved and embraced an open book management system by adapting the Great Game of Business in February 2021, and in the same year, we secured our first Great Place To Work certification.Expanding our reach became a defining theme in our journey. In July 2022, we proudly celebrated the achievement of 1000 dedicated Team Members. We have offices in Cebu and in Cagayan de Oro, with our third and newest office launched last August 2023 at JEG Tower. 2023 marks a pivotal moment for our business as we completed the strategic acquisition of Elixir Consulting, strengthening our position in the Australian Consulting space and supporting our expanded service offering. We also won our GGOB Healthy Company Award, maintained our GPTW certification and ISO certification, and became a certified B Corporation.These milestones reflect not only our commitment to growth but also the vibrant community we’ve fostered, laying the foundation for a remarkable legacy as expert growth partners for Australian financial services firms.WHAT WE OFFERwe have a deep understanding of the everyday challenges and insights into the strengths of enterprises we encounter. At VBP, we specialise in enhancing operational efficiencies and addressing cost-to-serve challenges for financial services firms. Our focus revolves around four key service:Accounting, Bookkeeping, and Report ManagementFinancial Planning AssistanceMortgage Broking AssistanceParaplanningIn addition to these core services, we offer tailored business consulting services to optimise back-office operations across these four critical areas. With its offers and services, VBP aims to streamline Australian financial service firms’ operations and elevate their business to the next level.To learn more about us, visit http://vbp.au.Let's connect!

ABOUT US

VBP is an Australian company with operations in the Philippines that provides business growth, consulting, and delivery capabilities to more than 260 of the most innovative and disruptive financial services firms across Australia.

Our consulting-led approach leverages services in strategy, process improvement, intelligent automation, data analytics, and operations. We specialise in supporting financial firms, accounting practices, and mortgage brokers.

HOW WE STARTED

In 2013, VBP embarked on a visionary journey to transform how advice is delivered in Australia. From humble beginnings, we steadily evolved and embraced an open book management system by adapting the Great Game of Business in February 2021, and in the same year, we secured our first Great Place To Work certification.

Expanding our reach became a defining theme in our journey. In July 2022, we proudly celebrated the achievement of 1000 dedicated Team Members.

We have offices in Cebu and in Cagayan de Oro, with our third and newest office launched last August 2023 at JEG Tower. 2023 marks a pivotal moment for our business as we completed the strategic acquisition of Elixir Consulting, strengthening our position in the Australian Consulting space and supporting our expanded service offering. We also won our GGOB Healthy Company Award, maintained our GPTW certification and ISO certification, and became a certified B Corporation.

These milestones reflect not only our commitment to growth but also the vibrant community we’ve fostered, laying the foundation for a remarkable legacy as expert growth partners for Australian financial services firms.

WHAT WE OFFER

we have a deep understanding of the everyday challenges and insights into the strengths of enterprises we encounter. At VBP, we specialise in enhancing operational efficiencies and addressing cost-to-serve challenges for financial services firms. Our focus revolves around four key service:

• Accounting, Bookkeeping, and Report Management
• Financial Planning Assistance
• Mortgage Broking Assistance
• Paraplanning

In addition to these core services, we offer tailored business consulting services to optimise back-office operations across these four critical areas. With its offers and services, VBP aims to streamline Australian financial service firms’ operations and elevate their business to the next level.

To learn more about us, visit http://vbp.au.

Let's connect!