[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Vertiv Holdings jobs](https://jobs.opennash.com/companies/vertiv-holdings/) · [Search jobs](/search/)

Vertiv Holdings · Mandaluyong City, Philippines

# Governance Risk and Compliance I Analyst II

Mandaluyong City, Philippines Legal & Compliance 

Listed on Vertiv Holdings’s official careers site. Posted September 2, 2026. Check that it is still open and apply there.
[Apply on Vertiv Holdings’s careers site →](https://egup.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/20280577)

[OpenNash Jobs](https://jobs.opennash.com/) / [Vertiv Holdings](https://jobs.opennash.com/companies/vertiv-holdings/) / Governance Risk and Compliance I Analyst II

## Job description

### Job Title

Governance Risk and Compliance Analyst II Division: Governance, Risk & Compliance – IT Security

### Position Summary

The GRC Analyst will act as a key contributor to Vertiv’s Governance, Risk, and Compliance initiatives, driving risk assessments, security reviews, audit readiness, and third-party risk management efforts. This role supports continuous improvement of the risk register and policy exception processes, partners with cross-functional stakeholders, and helps develop a scalable security and compliance posture across the organization.

### Key Responsibilities
- Lead IT risk assessments, mitigation planning, and control monitoring activities.
- Oversee risk register updates and coordinate with risk owners and SMEs to track mitigation actions.
- Drive third-party risk reviews and assessments using OneTrust and SecurityScorecard, escalating high-risk vendors for action.
- Conduct contract reviews focused on information security terms and recommend necessary revisions.
- Respond to customer security questionnaires with input from SMEs using Loopio.
- Supervise compliance training rollouts (e.g., phishing campaigns, annual security awareness training).
- Review and recommend changes to IT security policies and standards aligned with ISO 27001, NIST CSF, and other frameworks.
- Generate and present GRC dashboards and KPIs to leadership to inform risk posture and team performance.
- Act as an escalation point for GRC process inquiries and ticket-related exceptions.
- Mentor junior analysts and support GRC program maturity through playbooks, SOPs, and process documentation.

### Qualifications
- Bachelor’s degree in information systems, Cybersecurity, or a related field.
- 5+ years of experience in GRC, IT Risk Management, or Information Security.
- Strong understanding of ITGC, SOX, ISO 27001, NIST CSF, and data privacy regulations (e.g., HIPAA, GDPR).
- Experience with GRC platforms such as ServiceNow GRC, OneTrust, and SecurityScorecard.
- Strong documentation and analytical skills with experience preparing audit-ready evidence.
- Certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Auditor (preferred).
- Excellent communication and stakeholder management skills across global teams.
- Strong organizational skills and ability to manage multiple deliverables independently.

## At a glance
- Posted by the employer: Sep 2, 2026
- First seen by OpenNash: Oct 10, 2026
- Last checked: Oct 18, 2026
- Listed for: 46 days
- Location: Mandaluyong City, Philippines[Apply on Vertiv Holdings’s careers site →](https://egup.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX/job/20280577)

## More jobs at Vertiv Holdings

### [AI Enablement & Adoption Manager](https://jobs.opennash.com/companies/vertiv-holdings/jobs/d933571ee2b4b07b0ff6/)

Mandaluyong City, Philippines

### [Application Engineering Analyst](https://jobs.opennash.com/companies/vertiv-holdings/jobs/e0e29574e030f597d467/)

Mandaluyong City, Philippines

### [Application Engineering Senior Analyst](https://jobs.opennash.com/companies/vertiv-holdings/jobs/0ab9b9d3c66639d16dea/)

Mandaluyong City, Philippines

### [Associate Engineer Reliability Engineering VIII (Power Systems)](https://jobs.opennash.com/companies/vertiv-holdings/jobs/30fee59c6240ae03b600/)

Mandaluyong City, Philippines

## Similar jobs at other companies

### [praktikum finance governance risk compliance](https://jobs.opennash.com/companies/richemont/jobs/ca37525958c548c57408/)

Richemont 

### [Senior Analyst, IT Compliance & Risk - Data Protection](https://jobs.opennash.com/companies/cvs-health/jobs/0bfc5341953d4da3965d/)

CVS Health 

### [Principal Risk Specialist, Compliance Governance Analyst](https://jobs.opennash.com/companies/capital-one-financial/jobs/d2ed12f07a027643b592/)

Capital One Financial 

### [Senior Risk Specialist, Compliance Governance Analyst](https://jobs.opennash.com/companies/capital-one-financial/jobs/c22c810422641ad42d7f/)

Capital One Financial 

### [Cybersecurity GRC (Governance, Risk Management, Compliance) Sr Analyst](https://jobs.opennash.com/companies/pepsico/jobs/794803aaa9e051b3f0cb/)

PepsiCo · Warszawa, Poland

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)