Deskripsi Pekerjaan
Are you a detail-oriented cybersecurity professional looking to make a significant impact? Lexmark International is seeking a dedicated Security Risk Analyst to join our dynamic team in Cebu City. In this hybrid role, you will be at the forefront of protecting our global information assets by identifying, evaluating, and mitigating complex security risks.
As a Security Risk Analyst, you will bridge the gap between technical infrastructure and business strategy. You will play a pivotal role in ensuring that our security controls align with industry best practices and compliance frameworks. If you are passionate about threat modeling, vulnerability management, and driving a culture of security, we want to hear from you.
Join a world-class technology company where innovation, integrity, and employee growth are at the heart of our culture. We offer a hybrid work environment that balances professional collaboration with flexibility.
Tanggung Jawab
- Assess and document information security risks across organizational infrastructure, applications, and processes.
- Develop and implement robust security controls and mitigation strategies to reduce identified risk exposure.
- Conduct periodic security risk assessments and provide actionable recommendations to key stakeholders.
- Collaborate with cross-functional IT teams to ensure secure integration of new technologies and system changes.
- Manage security incident response documentation and support the compliance lifecycle (ISO 27001, NIST, SOC2).
- Perform periodic policy reviews to ensure alignment with evolving threat landscapes and regulatory requirements.
- Provide security expertise for internal audits and external compliance assessments.
Kualifikasi
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
- 3+ years of experience in information security, risk management, or audit roles.
- Solid understanding of security frameworks such as NIST Cybersecurity Framework, ISO 27001, or CIS Controls.
- Proven ability to translate technical security findings into understandable business risks for management.
- Strong analytical skills with experience in threat modeling and vulnerability assessment methodologies.
- Relevant certifications such as CRISC, CISM, CISSP, or CompTIA Security+ are highly desirable.
- Excellent communication skills with the ability to influence stakeholders at all levels.