Cybersecurity Governance Associate

HRTx Inc.; Makati; On-site; PHP 600,000 - 800,000; Full time

Job summary

HRTx Inc. in Metro Manila, Makati seeks a Cybersecurity Governance Associate to support governance, risk and compliance activities. You will help implement policies, perform control assessments, and maintain risk registers while coordinating with IT, risk, audit, and business teams.

The role involves supporting third-party cybersecurity assessments, audits, and regulatory requirements, with a focus on documentation and evidence management.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, or related field.
• At least 1 year of experience in cybersecurity governance, risk, compliance, IT audit, or information security.
• Knowledge of ISO 27001, NIST, COBIT, or CIS Controls.
• Understanding of IT general controls and cybersecurity controls.
• Strong documentation, analytical, and stakeholder-management skills.
• Certifications such as CISA, CRISC, CISSP, ISO 27001 are an advantage.

Responsibilities

• Support implementation and maintenance of cybersecurity policies and standards.
• Conduct cybersecurity control assessments and compliance reviews.
• Maintain cybersecurity risk and control registers.
• Coordinate remediation of identified cybersecurity gaps.
• Support security audits, assessments, and regulatory requirements.
• Monitor compliance with cybersecurity policies and controls.
• Prepare cybersecurity governance reports and metrics.
• Coordinate with IT infrastructure, applications, risk, audit, and business teams.
• Support third-party/vendor cybersecurity assessments.
• Assist in security awareness and governance initiatives.
• Maintain cybersecurity documentation and evidence.

Skills

Documentation skills

Analytical skills

Stakeholder management

Policy & standards knowledge

Cybersecurity governance

Education

Bachelor's degree in IT, Cybersecurity, Computer Science, or related field

Tools

ISO 27001

NIST

COBIT

CIS Controls

Job description

Cybersecurity Governance Associate

Job Summary

Supports the organization's cybersecurity governance, risk, compliance, policies, standards, and control activities.

Key Responsibilities

• Support implementation and maintenance of cybersecurity policies and standards.
• Conduct cybersecurity control assessments and compliance reviews.
• Maintain cybersecurity risk and control registers.
• Coordinate remediation of identified cybersecurity gaps.
• Support security audits, assessments, and regulatory requirements.
• Monitor compliance with cybersecurity policies and controls.
• Prepare cybersecurity governance reports and metrics.
• Coordinate with IT infrastructure, applications, risk, audit, and business teams.
• Support third-party/vendor cybersecurity assessments.
• Assist in security awareness and governance initiatives.
• Maintain cybersecurity documentation and evidence.

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, or related field.
• Atleast 1 year of experience in cybersecurity governance, risk, compliance, IT audit, or information security.
• Knowledge of frameworks such as ISO 27001, NIST, COBIT, or CIS Controls.
• Understanding of IT general controls and cybersecurity controls.
• Strong documentation, analytical, and stakeholder-management skills.
• CISA, CRISC, CISSP, ISO 27001, or similar certification is an advantage.