AI-Driven Third-Party Risk Analyst (Remote-Friendly)

Genesys; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Genesys is seeking a Third-Party Risk Analyst in the Philippines, flexible location. You will support the end-to-end Third-Party Risk Management lifecycle, including intake, due diligence, risk assessments, issue tracking and ongoing monitoring.

Requirements include a bachelor’s degree in information security or related field and at least 2 years of experience in information security, IT audit, risk, compliance, vendor management, or GRC.

Qualifications

• Bachelor’s degree in information security, IT, Cybersecurity, or a related field.
• 2+ years of information security, IT audit, risk, compliance, vendor management, or GRC experience preferred.

Responsibilities

• Manage third-party risk workflow from intake to completion.
• Conduct initial and ongoing third-party security risk assessments.
• Administer and maintain risk assessment tooling (UpGuard).
• Review SOC 2, ISO 27001, policies and pen test summaries for control gaps.
• Document findings and recommend remediation or compensating controls.
• Track remediation plans and support reassessments and monitoring.
• Contribute to continual improvement of TPRM processes, templates and playbooks.

Skills

Critical thinking

Documentation

Stakeholder management

Vendor artifacts review

Communication skills

Adaptability to new tools

Education

Bachelor’s degree in information security

Job description

Genesys is seeking a Third-Party Risk Analyst in the Philippines, flexible location. You will support the end-to-end Third-Party Risk Management lifecycle, including intake, due diligence, risk assessments, issue tracking and ongoing monitoring.

Requirements include a bachelor’s degree in information security or related field and at least 2 years of experience in information security, IT audit, risk, compliance, vendor management, or GRC.