Cyber Security Governance Analyst | Cebu/Manila

QBE GROUP SHARED SERVICES LIMITED - PHILIPPINE BRANCH; Metro Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

QBE GROUP SHARED SERVICES LIMITED - PHILIPPINE BRANCH is seeking a risk governance professional to help identify and govern Shadow IT and third-party technology solutions. You will document risks, maintain risk registers, and report governance metrics for leadership and audit.

You will collaborate across Business, Technology, Cyber Security, Risk, Privacy, Compliance and Procurement to strengthen QBE’s governance framework and remediation efforts.

Qualifications

• Experience in cyber security, information security, technology risk, IT governance or related discipline.
• Experience supporting risk assessments, governance activities, compliance programs or remediation tracking.
• Knowledge of cyber risk management and frameworks such as ISO 27001, NIST CSF or COBIT.
• Strong analytical, problem-solving, written communication and stakeholder engagement skills.
• Experience preparing governance documentation, reports, metrics and risk summaries.
• A relevant degree or professional certification, regulated-industry experience, and familiarity with GRC platforms, cloud technologies or SaaS environments would be helpful.

Responsibilities

• Identify and assess Shadow IT, business-managed IT and third-party-mandated applications against controls and governance requirements.
• Document and communicate technology risks, control gaps and remediation recommendations; maintain inventories and risk registers.
• Monitor compliance, coordinate periodic reviews and track remediation, risk acceptance and governance outcomes through the full lifecycle.
• Partner with business and technology stakeholders to provide guidance and support onboarding, assessment and governance approval processes.
• Maintain dashboards, metrics and risk reporting; prepare clear summaries for governance forums, leadership, audit and assurance activities.
• Improve governance processes, tooling, automation, guidance and awareness while monitoring emerging technology and regulatory risks.

Skills

Cyber security

Information security

Technology risk

IT governance

Operational risk

Stakeholder engagement

Education

Relevant degree or professional certification

Tools

GRC platforms

Cloud technologies

SaaS environments

Job description

The opportunity

Join a role where technology, risk and business partnership come together. You will help QBE identify and assess business-managed technology, improve governance and support teams in managing technology risks through clear guidance, effective oversight and practical remediation.

About QBE

At QBE, we get to the heart of what matters for our customers. And we do it all with a human touch.

We’re an international insurer with more than 13,000 people working across 26 countries – which means we’re big enough for your ambitions, yet small enough for you to make a real impact. It’s an exciting time. We’re building momentum towards our vision to become the most consistent and innovative risk partner.

What if you could have a positive impact – at work and in the world? As part of the QBE team, you’ll get to spend every day working with people who are passionate, talented and kind.

Your new role :

You will support the identification, assessment and governance of Shadow IT, Business-Managed IT and third-party-mandated technology solutions. Working across business, Technology, Cyber Security, Risk, Privacy, Compliance and Procurement teams, you will document risks, monitor controls and remediation, and help improve QBE’s governance capability.

Key responsibilities will include:

• Identify and assess Shadow IT, Business-Managed IT and third-party-mandated applications, platforms and services against relevant controls and governance requirements.

• Document and communicate technology risks, control gaps and remediation recommendations, while maintaining inventories and risk registers.

• Monitor compliance, coordinate periodic reviews and track remediation, risk acceptance and governance outcomes through the full lifecycle.

• Partner with business and technology stakeholders to provide guidance and support onboarding, assessment and governance approval processes.

• Maintain dashboards, metrics and risk reporting, and prepare clear summaries for governance forums, leadership, audit and assurance activities.

• Improve governance processes, tooling, automation, guidance and awareness while monitoring emerging technology and regulatory risks.

About You

You are an analytical and organised risk professional who can understand technical issues and explain their business impact clearly. You build effective partnerships, manage multiple priorities and take a practical, customer-focused approach to governance and continuous improvement.

You'll also have:

• Experience in cyber security, information security, technology risk, IT governance, operational risk or a related discipline.

• Experience supporting risk assessments, governance activities, compliance programs or remediation tracking.

• Knowledge of cyber risk management and frameworks such as ISO 27001, NIST Cybersecurity Framework or COBIT.

• Strong analytical, problem-solving, written communication and stakeholder engagement skills.

• Experience preparing governance documentation, reports, metrics and risk summaries.

• A relevant degree or professional certification, regulated-industry experience, and familiarity with GRC platforms, cloud technologies or SaaS environments would be helpful.

Global Disclaimer:

The duties listed in this job description do not limit the assignment of work. They are not to be construed as a complete list of the duties normally to be performed in the position or those occasionally assigned outside an employee’s normal duties. Our Group Code of Ethics and Conduct addresses the responsibilities we all have at QBE to our company, to each other and to our customers, suppliers, communities and governments. It provides clear guidance to help us to make good judgement calls.

Your career. At the heart of it.