Cybersecurity GRC Analyst

Copeland India Private Ltd.; Quezon City; On-site; PHP 700,000 - 1,000,000; Full time

Benefits offered by this job

Flexible benefits plans

Paid parental leave

Vacation and holiday leave

Job summary

Copeland India Private Ltd. seeks a Cybersecurity Professional in Quezon City to develop and implement cybersecurity policies and standards, ensuring compliance with industry regulations. Responsibilities include conducting risk assessments and providing training to employees.

The candidate should possess a Bachelor's degree in Computer Science, 3+ years of experience in cybersecurity, and strong knowledge of security frameworks. A hybrid work arrangement is available, with work on-site three times a week.

Qualifications

• 3+ years of experience in cybersecurity roles.
• Strong knowledge of NIST CSF, CIS Controls, ISO 27001.
• Professional certifications in IT and Cybersecurity a plus.

Responsibilities

• Develop and maintain cybersecurity policies and procedures.
• Conduct risk assessments and compliance audits.
• Provide cybersecurity training to employees.

Skills

Cybersecurity best practices

Risk management frameworks

Communication skills

Analytical skills

Education

Bachelor's degree in Computer Science or related field

Tools

Zscaler DLP

Job description

Job Description

Principal Functional Responsibilities include:

• Develop, implement, and maintain cybersecurity policies, standards, and procedures in alignment with industry frameworks and regulatory requirements.
• Conduct risk assessments, security control evaluations, and gap analyses to identify and mitigate risks.
• Support internal and external audits, ensuring compliance with frameworks such as NIST CSF, ISO 27001, CIS Controls, SOC 2, and regulatory obligations.
• Assist in the management of third‑party risk assessments and vendor security evaluations.
• Track, monitor, and report on cybersecurity risks, controls, and compliance metrics.
• Work with cross‑functional teams to ensure security controls are embedded in business processes and IT operations.
• Develop and maintain risk registers, compliance documentation, and audit evidence repositories.
• Provide cybersecurity awareness training and guidance to employees on security best practices and compliance requirements.
• DLP Strategy & Oversight: Manage and fine‑tune DLP policies (preferable Zscaler) for Endpoint, Network and cloud to protect sensitive data (PII, PCI, IP).
• Stay current with evolving cybersecurity threats, regulatory changes, and best practices to enhance the organization’s security and compliance posture.

Basic Requirements

• Bachelor’s degree in computer science, Information Systems, or related field plus three (3+) years of experience or equivalent combination of education and experience.
• Strong knowledge of security and risk management frameworks like NIST CSF, CIS Critical Security Controls, ISO 27001, NIST 800‑53, FAIR, and CIS.
• Excellent oral and written communication skills, ability to communicate in technical and business terms, and develop presentations for senior management.
• 3+ years of experience in cybersecurity, governance, risk, and compliance.
• Experience conducting risk assessments, control evaluations, and compliance audits.
• Strong knowledge of cybersecurity best practices, policies, and procedures.
• Excellent analytical, problem‑solving, and communication skills.
• Ability to work independently and collaboratively in a dynamic environment.
• Professional certifications in IT and Cybersecurity a plus (e.g., Security+, GCRP, CGRC).

Preferred Requirements

• Bachelor’s degree in computer science, Information Systems, or related degree plus eight (3–4) years of experience or equivalent combination of education and experience.
• 3–4 years of experience in cybersecurity roles (incident response, security operations, application security, etc.).
• Ability to simultaneously handle multiple projects and adjust to changing priorities while multitasking effectively.
• Self‑starter, strong initiative, critical thinker, self‑directed with proven track record to collaborate and inspire change.
• Experience designing and implementing cybersecurity reporting and metrics (KPI/KRI development).
• Fluent in English; additional languages are a plus.

Competencies

• Tech Savvy: Anticipate and adopt innovations in business‑building digital and technology applications.
• Optimizes Work Processes: Know the most effective and efficient processes to get things done, focusing on continuous improvement.
• Plans & Aligns: Plan and prioritize work to meet commitments aligned with the interpersonal goals.
• Business Insight: Apply knowledge of business and the marketplace to advance the organization’s goals.
• Communicates Effectively: Develop and deliver multi‑mode communications that clearly understand the different audiences’ unique needs.

Work Conditions

The role has a mid‑shift schedule from 4pm to 1am and a hybrid work arrangement with on‑site work three times a week.

Benefits

• Flexible and competitive benefits plans tailored to individual/family needs.
• Flexible time off plans, including paid parental leave (maternal and paternal), vacation and holiday leave.

Equal Opportunity Employer

Copeland is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability, or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.