Cyber Risk & Compliance Analyst — Fintech (Makati)

eTap Inc.; Philippines; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

HMO

Performance bonus

Job training

Professional development

Health & wellness

Job summary

eTap Inc. in Makati, Philippines, is seeking an Information Security Analyst to protect the organization’s systems and data. You will develop and enforce security policies, identify risks, and drive compliance across IT operations in a fast-growing fintech environment.

You will lead awareness programs, coordinate incident responses, and collaborate with teams to implement secure architectures while ensuring regulatory alignment and reporting.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity or related field.
• 3–5 years of professional information security experience.
• Experience in regulated environments is a plus.
• Knowledge of GDPR, HIPAA, PCI DSS, ISO 27001/27701 and Data Privacy Act.
• Strong analytical, communication, and documentation skills.
• Experience in policy development, risk assessment and controls.

Responsibilities

• Create, review, and update information security policies, procedures, and standards.
• Identify, assess, and mitigate information security risks; implement controls.
• Design and deliver security awareness programs for employees.
• Establish incident response procedures and coordinate investigations.
• Conduct security audits and support regulatory compliance requirements.
• Collaborate on secure architecture and vendor risk management.
• Provide governance guidance to management and stakeholders.

Skills

Information security

Risk assessment

Incident response

Security governance

Education

Bachelor's degree in IT/CS/Cybersecurity

Job description

eTap Inc. in Makati, Philippines, is seeking an Information Security Analyst to protect the organization’s systems and data. You will develop and enforce security policies, identify risks, and drive compliance across IT operations in a fast-growing fintech environment.

You will lead awareness programs, coordinate incident responses, and collaborate with teams to implement secure architectures while ensuring regulatory alignment and reporting.