Job Title: Information Security Analyst - Global Risk, Compliance & BCP
Location: Taguig City
Work set up: Hybrid
Salary: PHP 70,000-75,000
Work schedule: Mid shift
Headcount: 2

Qualifications:

• Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field (Master’s preferred).
• BPO experience is preferred but not required.
• Certifications such as ISO27001, CISA, CISSP, CISSP, or BCP/DR-related certifications (e.g., CBCP, ISO 22301 Lead Implementer) are a plus.
• 5–7 years in Information Security, Risk, or Compliance functions
• Familiarity with BCP/DR planning, testing, and integration into risk management and audit functions.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Understanding of information security principles, GRC frameworks (ISO 27001, NIST, CIS, PCI-DSS), and risk assessment methodologies
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.
•Strong communication, analytical problem-solving, and ability to translate security and risk concepts for diverse business stakeholders.
• Reject applicants with frequent job switching or serial job-hoppers
• Should be amenable to work onsite on a hybrid setup in Taguig
• Amenable to mid-shift schedule

Job Description

• Support Security Business Partners in delivering governance, risk, and compliance initiatives.
• Conduct risk assessments, vulnerability tracking, and remediation follow-ups.
• Coordinate security audits (internal and external), ensuring evidence collection and compliance reporting.
• Assist in developing, testing, and maintaining Business Continuity Plans (BCP) and Disaster Recovery (DR) exercises to ensure organizational resilience.
• Collaborate with technical and business teams during incident response, focusing on process coordination.
• Prepare reports, dashboards, and documentation to support compliance, audit readiness, and executive reporting.
• Contribute to security awareness and compliance training initiatives across the enterprise.
• Align security processes with frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory requirements.

Perks and benefits
• Medical
• Miscellaneous allowance
• Dental
• Provident Fund

Interested and qualified Candidates should send their CV  to esther.igweonu@gratitudeindia.com