Cyber Risk & Compliance Strategist

PLDT; Makati; Presencial; PHP 600 000 - 1 000 000; Tempo integral

Resumo da oferta

PLDT is seeking a cybersecurity risk professional to determine and strengthen the enterprise risk posture across the PLDT Group, ensuring alignment with internal standards and regulatory compliance. You will lead risk assessments, validate controls, and coordinate remediation for vulnerabilities in projects, networks, and cloud services.

Strong knowledge of risk frameworks and security governance is required.

Qualificações

• Bachelor's degree in IT, CS, engineering or related field.
• 4-5 years of IT or cybersecurity experience.
• Knowledge of cloud security and regulatory requirements.

Responsabilidades

• Perform risk assessments for multiple critical projects across the PLDT Group.
• Identify and mitigate security risks within defined risk tolerances.
• Conduct risk assessments and validations per company standards and best practices.
• Review project scope, network architecture, data flow, evidence to support assessments.
• Analyze designs and diagrams to identify vulnerabilities and recommend controls.
• Lead risk treatment plans, track remediation, and ensure timely deployment.
• Coordinate with project teams and document assessment results and reports.
• Assess requests deviating from cybersecurity policies, including access and VPN requests.
• Perform vulnerability scans and track remediation.

Conhecimentos

Risk assessment

Information security

Cloud security

Security frameworks

Regulatory compliance

Project management

Formação académica

Bachelor's degree in IT/CS/Engineering

Ferramentas

Vulnerability scanners

Descrição da oferta de emprego

PLDT is seeking a cybersecurity risk professional to determine and strengthen the enterprise risk posture across the PLDT Group, ensuring alignment with internal standards and regulatory compliance. You will lead risk assessments, validate controls, and coordinate remediation for vulnerabilities in projects, networks, and cloud services.

Strong knowledge of risk frameworks and security governance is required.