Information Security Analyst - Global Risk, Compliance & BCP

Location: Taguig City

Work Setup: Hybrid

Salary: PHP 70,000 - 75,000

Work Schedule: Mid-shift

Qualifications:

• Bachelor’s degree in engineering/science, Computer Science, Cybersecurity, or a related field (Master’s degree preferred).
• BPO experience is preferred but not required.
• Certifications such as ISO 27001, CISA, CISSP, or BCP/DR-related certifications (e.g., CBCP, ISO 22301 Lead Implementer) are a plus.
• 5–7 years of experience in Information Security, Risk, or Compliance functions.
• Familiarity with BCP/DR planning, testing, and integration into risk management and audit functions.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Understanding of information security principles, GRC frameworks (ISO 27001, NIST, CIS, PCI-DSS), and risk assessment methodologies.
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.
• Strong communication, analytical problem-solving skills, and ability to translate security and risk concepts for diverse business stakeholders.
• Stable employment history without frequent job changes.
• Must be amenable to working onsite in a hybrid setup in Taguig City.
• Must be amenable to a mid-shift schedule.

Job Description:

• Support security business partners in delivering governance, risk, and compliance initiatives.
• Conduct risk assessments, vulnerability tracking, and remediation follow-ups.
• Coordinate security audits (internal and external), ensuring evidence collection and compliance reporting.
• Assist in developing, testing, and maintaining Business Continuity Plans (BCP) and Disaster Recovery (DR) exercises to ensure organisational resilience.
• Collaborate with technical and business teams during incident response, focusing on process coordination.
• Prepare reports, dashboards, and documentation to support compliance, audit readiness, and executive reporting.
• Contribute to security awareness and compliance training initiatives across the enterprise.
• Align security processes with frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory requirements.

Perks and Benefits:

• Medical
• Miscellaneous allowance
• Dental
• Provident Fund