Full-Time Security GRC Analyst (Cloud/AWS) - Philippines Remote

• Maintain compliance tracking capabilities to help ensure adherence with Turnitin’s security program and industry standards such as NIST CSF, NIST 800-53, SOC 2, TX-RAMP and PCI DSS.
• Conduct risk and compliance assessments, audits, and risk evaluations to identify potential risk and compliance gaps.
• Lead preparation and audit activities required to maintain our SOC 2 Type 2.
• Collaborate with internal teams and external auditors for audit and compliance reviews.
• Collaborate with sales and customer support teams to respond to security questionnaires and security posture questions from customers.
• Support TPRM Program and conduct third-party risk assessments.
• Complete user access reviews.
• Administration of GRC platform.
• Participate in the development and documentation of security policy, standards and processes to align with company information security strategy.
• Provide security awareness and phishing training for employees and promote a culture of security and compliance.
• Coordinate phish testing.
• Collaborate with DevOps, IT, Legal, Engineering, People Team, and other departments to ensure security control and policy requirements are integrated into systems and business processes.
• Automate manual compliance tasks and improve team processes.
• Leverage AWS and Wiz for continuous monitoring.
• Measure effectiveness vs just implementation.

• Cloud Infrastructure with general knowledge of AWS services such as CloudFormation, Serverless, AWS Config, CloudTrail, IAM, and JSON
• Basic scripting

What is the last date for applying to the job?

Which countries are accepted for this remote job?