GRC Analyst – APAC

About the role

Rogo is seeking a GRC Analyst for the APAC region to support customer trust, security assurance, and compliance programs as the company scales globally. The role works closely with security, engineering, legal, and go‑to‑market teams to communicate Rogo’s security and privacy posture to customers, partners, and internal stakeholders.

Key responsibilities

• Respond to customer security inquiries, risk assessments, and security reviews, providing accurate and timely information.
• Maintain and improve security documentation, ensuring alignment with current systems and controls.
• Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness.
• Identify common themes and gaps from customer inquiries and contribute to continuous improvement of security and compliance practices.
• Help streamline and scale trust‑related workflows as customer volume and enterprise requirements grow.

Required profile

• Experience supporting customer‑facing security, compliance, or trust functions at a SaaS or cloud‑native company.
• Ability to translate technical security concepts into clear, concise written responses.
• Strong attention to detail and capacity to manage multiple parallel requests without sacrificing quality.
• Excellent communication skills with both technical and non‑technical stakeholders.

Required skills

• Understanding of cloud security concepts (AWS, GCP, Kubernetes, IAM).
• Familiarity with enterprise security expectations such as access control, data protection, and incident response.