Cyber Risk & Governance Analyst

QBE GROUP SHARED SERVICES LIMITED - PHILIPPINE BRANCH; Metro Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

QBE GROUP SHARED SERVICES LIMITED - PHILIPPINE BRANCH is seeking a risk governance professional to help identify and govern Shadow IT and third-party technology solutions. You will document risks, maintain risk registers, and report governance metrics for leadership and audit.

You will collaborate across Business, Technology, Cyber Security, Risk, Privacy, Compliance and Procurement to strengthen QBE’s governance framework and remediation efforts.

Qualifications

• Experience in cyber security, information security, technology risk, IT governance or related discipline.
• Experience supporting risk assessments, governance activities, compliance programs or remediation tracking.
• Knowledge of cyber risk management and frameworks such as ISO 27001, NIST CSF or COBIT.
• Strong analytical, problem-solving, written communication and stakeholder engagement skills.
• Experience preparing governance documentation, reports, metrics and risk summaries.
• A relevant degree or professional certification, regulated-industry experience, and familiarity with GRC platforms, cloud technologies or SaaS environments would be helpful.

Responsibilities

• Identify and assess Shadow IT, business-managed IT and third-party-mandated applications against controls and governance requirements.
• Document and communicate technology risks, control gaps and remediation recommendations; maintain inventories and risk registers.
• Monitor compliance, coordinate periodic reviews and track remediation, risk acceptance and governance outcomes through the full lifecycle.
• Partner with business and technology stakeholders to provide guidance and support onboarding, assessment and governance approval processes.
• Maintain dashboards, metrics and risk reporting; prepare clear summaries for governance forums, leadership, audit and assurance activities.
• Improve governance processes, tooling, automation, guidance and awareness while monitoring emerging technology and regulatory risks.

Skills

Cyber security

Information security

Technology risk

IT governance

Operational risk

Stakeholder engagement

Education

Relevant degree or professional certification

Tools

GRC platforms

Cloud technologies

SaaS environments

Job description

QBE GROUP SHARED SERVICES LIMITED - PHILIPPINE BRANCH is seeking a risk governance professional to help identify and govern Shadow IT and third-party technology solutions. You will document risks, maintain risk registers, and report governance metrics for leadership and audit.

You will collaborate across Business, Technology, Cyber Security, Risk, Privacy, Compliance and Procurement to strengthen QBE’s governance framework and remediation efforts.