{"id":2588342,"url":"https://alion.io/job/salmon-group-grc-lead","title":"GRC Lead","company":{"id":2207044,"name":"Salmon Group","domain":"salmon.group","url":"https://alion.io/company/salmon-group","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"UTC+8","utc_offset_min":8,"utc_offset_max":8},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["KZ","PL","RS","GE"],"hiring_countries_total":4,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":121000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-09-18T06:32:20Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-10-15T12:41:02Z","board_verified":true,"closed_at":null,"days_open":27,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":27},"description":"Remote \nSalmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.\nWe combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.\n7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.\nManila-based, globally distributed, and hybrid-first - our team spans 45+ countries.\nIf you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.\nSoutheast Asia's fintech moment starts here.\nAbout the role:\nYou'll own information security risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology.\nWhat you'll do:\nForm an independent view of security risk and challenge whether proposed controls actually address it, working directly with the Group CISO\n\nAssess control design and operating effectiveness across areas such as IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development\n\nTurn risk and control data into clear, decision-ready reporting for governance forums\n\nWhat you'll own:\nOwn the security risk process end to end: assessment, treatment, acceptance, monitoring, and reporting\n\nMaintain the risk register and challenge risk assessments and treatment plans so residual risk, ownership, and remediation status stay current\n\nMaintain the security control framework, test controls using evidence, data, sampling, or technical validation, and drive remediation with control owners\n\nMaintain the ISO 27001 ISMS: policies and standards, Statement of Applicability, risk records, control evidence, exceptions, and key security registers\n\nTrack control deficiencies, findings, exceptions, and remediation actions\n\nDefine KRIs and control metrics, and flag where management decisions or escalation are needed\n\nWhat makes you a strong fit:\nStrong practical experience in information security risk management: inherent and residual risk, treatment, acceptance, control effectiveness, risk appetite\n\nEnough technical depth to critically assess controls across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development\n\nHands-on experience reviewing or testing controls, with the ability to distinguish a documented control from an effective one\n\nWorking knowledge of ISO 27001, with the ability to turn complex risk and control information into concise management reporting\n\nComfortable working with GRC platforms, structured risk and control registers, and evidence management\n\nWhat we offer:\nOwnership and flexibility\nFully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)\n\nCompany-provided tools and equipment\n\nHealth and time off\nMedical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits\n\nAccess to an internal mental health support specialist\n\n22 vacation days, Philippine public holidays, and 15 sick days\n\nGrowth and team experience\nOpportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications\n\nCompany-sponsored trips to Manila to meet and work with your team in person\n\nHigh-performing teams can earn a dedicated beach house week in Southeast Asia\n\nWe believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.","description_format":"text","description_chars":3773,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Kazakhstan","iso":"KZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Serbia","iso":"RS","kind":"country"},{"name":"Georgia","iso":"GE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Food & Beverages","Seafood"],"lifecycle":[{"event":"open","at":"2026-10-15T04:48:30Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.88,"p_room":0.9,"age_days":26,"expected_fill_days":39,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/salmon-group-grc-lead","json_url":"https://alion.io/job/salmon-group-grc-lead.json","meta":{"generated_at":"2026-10-15T13:34:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20928,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2207044},"rest":"https://alion.io/mcp/rest/get_company?id=2207044"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsalmon-group-grc-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsalmon-group-grc-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsalmon-group-grc-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/salmon-group-grc-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsalmon-group-grc-lead"}]}