Cybersecurity/IT Risk Officer - Bank | Up to 80K Salary

weSource Management Consultancy Firm; Makati; On-site; PHP 812,448 - 973,152; Full time

Job summary

A consulting firm in the Philippines is hiring a Cybersecurity/IT Risk Officer. This full-time role entails establishing a robust IT risk management framework, evaluating IT-related risks, and ensuring compliance with regulatory standards. The ideal candidate will possess over 5 years of relevant experience, with a strong focus on cybersecurity and excellent communication skills. A Bachelor's degree in Computer Science is required, and a Master's degree is a plus. This is a key leadership position with an immediate start date.

Qualifications

• 5+ years of experience in IT risk management, cybersecurity, or IT governance.
• At least 2 years in a leadership or managerial role.
• Knowledge of emerging IT risks such as cloud computing, AI, and IoT.

Responsibilities

• Establish an IT risk management framework aligned with business goals.
• Identify and evaluate IT-related risks including cybersecurity threats.
• Collaborate with auditors to ensure IT compliance with industry standards.

Skills

IT risk management

Cybersecurity expertise

Incident management

Regulatory compliance

Strong communication skills

Education

Bachelor's degree in Computer Science

Master's degree in a related field (preferred)

Tools

Risk management frameworks (NIST, ISO 27001, COBIT)

IT risk management tools

Job description

Cybersecurity/IT Risk Officer - Bank | Up to 80K Salary

Job Openings Cybersecurity/IT Risk Officer - Bank | Up to 80K Salary

About the job Cybersecurity/IT Risk Officer - Bank | Up to 80K Salary

Job Expectations:

• Employment Type: Full-Time; Permanent (Direct Hire)
• Work Schedule: Mondays - Fridays, day shift
• Hiring Process: Paper Screening/Initial Interview - Final Interview

Responsibilities:

• Establish a robust IT risk management framework aligned with business goals, regulatory mandates, and industry standards. Maintain policies and controls to identify, assess, and mitigate IT risks while advising senior management on critical exposures.
• Identify and evaluate IT-related risks, including cybersecurity threats, system failures, and third-party vulnerabilities. Conduct regular risk assessments and maintain risk registers to track and mitigate emerging threats.
• Develop and enforce cybersecurity policies for threat detection, incident response, and data protection. Ensure IT systems remain secure while maintaining compliance with data privacy regulations like GDPR and HIPAA.
• Collaborate with auditors, regulators, and vendors to ensure IT compliance with industry standards. Provide senior management with reports on IT risk status, key indicators, and mitigation efforts.
• Lead responses to major IT incidents, such as cyberattacks and system failures, to minimize impact and ensure recovery. Conduct post-incident reviews to strengthen risk management practices.
• Build and mentor an IT risk management team while coordinating with departments like IT, legal, and compliance. Foster a risk-aware culture through training and awareness programs.
• Assess and manage risks related to technology infrastructure, cloud services, and third-party vendors. Ensure vendor contracts include risk mitigation clauses and monitor compliance with security policies.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's Degree is a big plus.
• 5+ years of experience in IT risk management, cybersecurity, or IT governance, with at least 2 years in a leadership or managerial role
• Expertise in risk assessments, incident management, and regulatory compliance.
• Experience with risk management frameworks (e.g., NIST, ISO 27001, COBIT) and IT governance best practices.
• Strong background in cybersecurity, data protection, and IT infrastructure.
• Knowledgeable of IT risk management tools and techniques.
• Strong understanding of emerging IT risks, such as cloud computing, AI, and IoT.
• Possesses excellent interpersonal and communication (written and verbal) skills.
• Certifications like CISSP, CISM, CRISC, and CISA are preferred.
• Can start immediately if possible.

***Only shortlisted candidates will be contacted, tailoring CV is recommended***