Deskripsi Pekerjaan
Indra Philippines, a global leader in consulting and technology, is looking for a skilled IT Security Risk and Governance Analyst to join our office in Pasig City, Metro Manila. This is an excellent opportunity for a security professional to take on a pivotal role that ensures the security and resilience of our clients' systems and data.
As an IT Security Risk and Governance Analyst, you will be at the forefront of identifying and managing security risks across multiple projects. You will work to embed security into every phase of the system development lifecycle, from initial concept to deployment and beyond. Your responsibilities will include performing comprehensive risk assessments, developing risk treatment plans, and ensuring compliance with internal policies and external regulations such as ISO 27001, NIST, and local data protection laws.
You will partner with diverse teams to promote a culture of security awareness and governance. By providing expert guidance on security requirements, you will help shape the security architecture of new and existing systems. Your contributions will be vital in minimizing risk exposure and protecting organizational assets.
We are seeking a proactive individual with a strong analytical mindset and excellent communication skills. The ideal candidate will possess relevant certifications such as CISSP, CISM, or CRISC, and have a deep understanding of risk management frameworks.
At Indra Philippines, we invest in our people. You will have access to continuous learning opportunities, mentorship, and a clear career path. We offer a competitive salary package, comprehensive benefits, and a flexible working environment.
If you are passionate about IT security and governance and want to make a meaningful contribution, we invite you to apply for this exciting role.
Tanggung Jawab
- Conduct risk assessments and security evaluations for new and existing system projects to identify potential threats and vulnerabilities.
- Ensure that security requirements are integrated into the system development lifecycle (SDLC) from inception to deployment.
- Develop and maintain security governance frameworks, policies, standards, and procedures in alignment with industry best practices and regulatory requirements.
- Collaborate with project teams to provide expert security guidance and recommend appropriate controls and mitigations.
- Monitor and review security compliance across projects, reporting on risk status and recommending remediation actions.
- Facilitate security awareness and training sessions to promote a culture of security within the organization.
- Stay up-to-date with emerging security threats, technologies, and regulatory changes to continuously improve the security posture.
- Prepare and present security risk reports to stakeholders and management.
Kualifikasi
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- At least 3-5 years of experience in IT security, risk management, or governance roles.
- Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly preferred.
- Strong knowledge of security frameworks and standards including ISO 27001, NIST, COBIT, and PCI-DSS.
- Familiarity with Philippine data privacy laws and regulations (DPA) is an advantage.
- Excellent analytical, problem-solving, and decision-making abilities.
- Strong communication and interpersonal skills to work effectively with cross-functional teams.
- Experience with risk assessment methodologies and tools.