GRC Lead

Job not on LinkedIn

🔥 1 hour ago

🌐 Serbia, Poland, +2 more countries – Remote

🇷🇸 Serbia – Remote 🇵🇱 Poland – Remote 🇰🇿 Kazakhstan – Remote 🇬🇪 Georgia – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SALMON ROBOTICS LIMITED

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🛡️ Insurance

📦 Logistics

Consulting • Insurance • Logistics

SALMON ROBOTICS LIMITED is a financial technology company building digital banking and consumer finance services in the Philippines under the Salmon Group and Salmon Bank brands. Backed by experienced finance and tech leaders and international investors, it operates a licensed rural bank, offers deposit products, consumer lending, payment and QR solutions, and deploys AI and data analytics to improve security, customer experience, and inclusivity. The company emphasizes customer care, intuitive product design, partnerships with retailers and payment networks, and 24x365 dependable service to expand access to modern financial services for millions of Filipinos.

📋 Description

• Own information security risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology • Form an independent view of security risk and challenge whether proposed controls address it, working directly with the Group CISO • Assess control design and operating effectiveness across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development • Turn risk and control data into clear, decision-ready reporting for governance forums • Own the security risk process end to end, including assessment, treatment, acceptance, monitoring, and reporting • Maintain the risk register and challenge risk assessments and treatment plans • Maintain the security control framework and test controls using evidence, data, sampling, or technical validation • Drive remediation with control owners • Maintain the ISO 27001 ISMS, including policies and standards, Statement of Applicability, risk records, control evidence, exceptions, and key security registers • Track control deficiencies, findings, exceptions, and remediation actions • Define KRIs and control metrics and flag where management decisions or escalation are needed

🎯 Requirements

• Strong practical experience in information security risk management, including inherent and residual risk, treatment, acceptance, control effectiveness, and risk appetite • Technical depth to critically assess controls across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development • Hands-on experience reviewing or testing controls • Working knowledge of ISO 27001 • Ability to turn complex risk and control information into concise management reporting • Comfortable working with GRC platforms, structured risk and control registers, and evidence management • Ability to work core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8) • English proficiency level required as part of the application

🏖️ Benefits

• Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8) • Company-provided tools and equipment • Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits • Access to an internal mental health support specialist • 22 vacation days • Philippine public holidays • 15 sick days • Opportunities to learn and share expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications • Company-sponsored trips to Manila to meet and work with the team in person • High-performing teams can earn a dedicated beach house week in Southeast Asia