Cyber Risk & Compliance Architect

Hammerjack Pty Ltd; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Hammerjack Pty Ltd seeks a seasoned Cyber Risk Assessor to lead audits across enterprise, cloud, and AI-enabled solutions from Makati. You will identify gaps, risks, and controls aligned with NIST, ISO, SOC 2, PCI DSS, and IAM best practices.

Hybrid work setup (1-2 days onsite) with collaboration across technical and non-technical stakeholders, delivering detailed risk reports and executive summaries to senior leadership.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 3–7 years of experience in cybersecurity audits, TRA, and risk assessments.
• Strong knowledge of cybersecurity frameworks (NIST CSF, NIST 800-30, NIST AI RMF, ISO 27001, SOC 2, PCI DSS, CIS Controls, OWASP LLM/GenAI guidance).

Responsibilities

• Conduct cyber assessments for organizations, technology environments, and solutions to identify security gaps, vulnerabilities, and risks.
• Assess diverse solution types including enterprise apps, cloud platforms, data pipelines, third-party or vendor solutions, and AI-enabled solutions.
• Evaluate security policies, procedures, governance practices, and technical controls to ensure compliance with standards.
• Identify cyber threats, attack vectors, and potential risks impacting operations and delivery.
• Prepare detailed assessment reports and executive summaries; present findings to leadership.

Skills

Cybersecurity frameworks

Threat & risk assessments

Security operations

Cloud security

AI/GenAI risk

Education

Bachelor's or Master's in Cybersecurity

Tools

Security risk assessment tools

Threat intelligence

Job description

Hammerjack Pty Ltd seeks a seasoned Cyber Risk Assessor to lead audits across enterprise, cloud, and AI-enabled solutions from Makati. You will identify gaps, risks, and controls aligned with NIST, ISO, SOC 2, PCI DSS, and IAM best practices.

Hybrid work setup (1-2 days onsite) with collaboration across technical and non-technical stakeholders, delivering detailed risk reports and executive summaries to senior leadership.