The position is responsible for providing support in the development and implementation of information technology / security policies and procedures of the company. The position is also responsible for assisting the department head in ensuring that IT risk management and information security initiatives of the company are compliant with applicable regulatory/legal requirements.
Responsibilities
- Conducts independent assessments of existing IT systems, platforms (e.g., I-Click), and IT infrastructure, identifying risks and vulnerabilities related to both IT operations and information security.
- Supports the identification and measurement of IT and information security risks within the organization. Help gather data on emerging threats, security incidents, and vulnerabilities, and contribute to risk assessments that prioritize mitigation actions and compliance with security policies.
- Collaborate in reviewing IT projects, system requirements, and partner integrations to assess associated IT risks, particularly information security aspects. Ensure that security controls and compliance requirements are addressed during new project evaluations and integration efforts.
- Ensures organizational compliance with IT risk management and information security policies, as well as industry standards and regulatory requirements (e.g., GDPR, ISO 27001, HIPAA).
- Collaborates with legal and compliance teams to develop, implement, and update IT risk management policies, procedures, and guidelines in accordance with regulatory requirements.
- Prepare and present detailed risk management and compliance reports to the IT Risk Department Head and other senior management teams. Provide insights into risk status, trends, and mitigation effectiveness.
Qualifications
- Graduate of any four (4) year course, preferably in Information Technology or Business Administration
- At least two (2) years of work experience with in-depth knowledge of IT Risk Management and Information Security
- Knowledgeable in ISO 31000, Information Security Management System (ISMS) and ISO 27001 and 27701, NIST, COBIT, BSP Circulars on IT Risk Management
- Willing to work in Makati
