Cyber Security Governance & Shadow IT Analyst

QBE Group Shared Services Centre; Cebu City; On-site; PHP 600,000 - 900,000; Full time

Job summary

QBE Group Shared Services Centre in Cebu City is seeking a security-focused analyst to support Shadow IT governance and risk management. You will partner with business and IT teams to identify, assess and remediate technology risks across third-party and internal applications.

The role requires knowledge of IT governance, cyber security controls, and reporting to risk committees. You will help maintain risk registers, dashboards and associated documentation, while promoting continuous

Qualifications

• Experience in Cyber Security, Information Security, Technology Risk, IT Governance or a related discipline.
• Experience supporting risk assessments, governance activities or compliance programs.
• Understanding of cybersecurity risk management principles and governance practices.
• Knowledge of information security frameworks and standards such as ISO 27001, NIST CSF, COBIT or related frameworks.
• Ability to assess risk and translate technical concepts into clear business outcomes.
• Strong analytical and communication skills with stakeholder engagement ability.

Responsibilities

• Identify and analyze Shadow IT and 3rd party governance solutions and risks.
• Conduct risk assessments of applications, platforms and services.
• Review documentation to assess risk exposure and remediation needs.
• Maintain Shadow IT inventories and risk registers; track remediation.
• Prepare governance reports, metrics and risk summaries for leadership.
• Support governance forums and ongoing policy documentation.

Skills

Analytical Thinking

Cybersecurity

Risk Management

Stakeholder Engagement

Problem Solving

Vulnerability Management

Threat Mitigation

Security Monitoring

Education

Degree in Cyber Security, Information Technology, Risk Management, Business, Governance

Tools

GRC platforms

Workflow tools

Technology inventory solutions

Job description

QBE Group Shared Services Centre in Cebu City is seeking a security-focused analyst to support Shadow IT governance and risk management. You will partner with business and IT teams to identify, assess and remediate technology risks across third-party and internal applications.

The role requires knowledge of IT governance, cyber security controls, and reporting to risk committees. You will help maintain risk registers, dashboards and associated documentation, while promoting continuous