Cybersecurity Analyst (Vendor Security Risk and Compliance Analyst)

Talkpush; Taguig; Hybrid; PHP 558,000 - 949,000; Full time

Benefits offered by this job

Night differential 15%

20 PTO per year

Annual Appraisal

Annual Incentive

Hybrid Work Arrangement

HMO with free dependents

Group life insurance

Job summary

Talkpush is seeking a security-focused professional to monitor vendor questionnaires, perform tier I assessments, and map data flows with Visio. You will assess risks, identify vulnerabilities, and document remediation steps to protect data and systems.

Join a hybrid team focusing on security controls, compliance, and collaboration with Tier II analysts to finalize risk conclusions and improve defenses.

Qualifications

• Fluent English communication required.
• Broad knowledge in risk, compliance and audit of systems/processes.
• Experience in information security risk assessments.
• Ability to identify vulnerabilities/threats to data, systems and networks.
• Document and rate threats/vulnerabilities and remediation steps.

Responsibilities

• Monitor assessment queue in ServiceNow for digitized information security questionnaires submissions.
• Perform tier I initial assessment of vendor responses.
• Create Visio diagrams showing data flow between systems/environments.
• Use cheat sheet to submit follow-up questions and track responses.
• Identify weaknesses in vendor security controls and document findings.
• Escalate to tier II Vendor Security team for final analysis.
• Update Data Flow Diagram as changes occur.

Skills

Fluent English

IT security

Risk assessments

Vulnerability identification

Threat documentation

Job description

BENEFITS

• 15% Night differential
• 20 Paid Time Off (PTO) per year
• Annual Appraisal
• Annual Incentive
• Hybrid Work Arrangement
• HMO with FREE dependents
• Group life insurance

WORKING CONDITIONS:

• • Hybrid work setup
  • Night shift work schedule

RESPONSIBILITIES

• Monitor the assessment queue within Tenet’s ServiceNow vendor module for submissions of digitized information security questionnaires.
• Perform tier I initial assessment of vendor responses provided in digitized information security questionnaires.
• Create Visio diagrams that represent the flow of Tenet data between systems, data centers, and environments, Data Flow Diagrams, based on responses received and reviewed as part of tier I assessments.
• Utilize the information security questionnaire cheat sheet to submit electronic follow up questions for missing or incomplete information and track status of additional vendor responses.
• Identify areas of weakness in vendor security controls, which could introduce risk to Tenet data and/or systems and document findings in Tenet’s ServiceNow vendor module.
• Transfer to tier II Vendor Security team for final analysis.
• Update and finalize Data Flow Diagram, as needed, based on changes to vendor responses.

QUALIFICATIONS

• Fluent English communication skills
• Information Technology (IT) security professional with a broad range of knowledge in the assessment of risk, compliance and audit of systems/processes
• Proven ability in the performance of information security risk assessments.
• Demonstrated ability in identification of vulnerabilities/threats to data, systems and networks.
• Ability to identify, document and rate threats/vulnerabilities, and remediation steps recommended to reduce risks to data, systems and networks.