Cybersecurity Risk Officer

Hammerjack Pty Ltd; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Hammerjack Pty Ltd is seeking a Cybersecurity Risk Officer to strengthen the organization’s security posture and manage cybersecurity risks across business units. You will assess risk, oversee third-party security, and support business continuity and incident response efforts.

Join a proactive team, collaborate with IT and compliance, and help implement risk management frameworks, track KRIs, and ensure regulatory alignment across ISO 27001, GDPR-related expectations, and data protection

Qualifications

• Bachelor's degree in Information Technology, Computer Engineering, or related field.
• 3+ years in cybersecurity risk management and 1-2 years in IT operations.
• Knowledge of ISO 27001 and NIST CSF; data protection laws (GDPR, DPA2012).
• Strong analytical, problem-solving, and communication skills.
• Familiar with cybersecurity tools, technologies, and IT infrastructure.
• Entry-level certification preferred (CompTIA Security+ or equivalent).
• Able to manage multiple priorities and meet tight deadlines.

Responsibilities

• Implement and maintain cybersecurity risk management frameworks and policies.
• Conduct vulnerability scans, penetration testing, and ongoing risk assessments.
• Maintain and update the cybersecurity risk register and track remediation efforts.
• Manage risk acceptance and exception processes, and report KRIs.
• Assess third-party vendors for security and regulatory compliance (ISO 27001, SOC 2, GDPR, DPA2012).
• Ensure cybersecurity controls are integrated into BC/DR plans.
• Support incident response planning and coordinate with internal teams and vendors.
• Communicate risks, findings, and mitigation strategies to stakeholders.

Skills

Analytical skills

Communication skills

Problem-solving

Education

Bachelor's degree in Information Technology, Computer Engineering, or related field

Tools

ISO 27001

NIST CSF

GDPR

DPA2012

Job description

About the Role

We're looking for a Cybersecurity Risk Officer to strengthen our organization's security posture and ensure robust protection against evolving cyber threats. You'll assess and manage cybersecurity risks, oversee third-party security, and support business continuity and incident response efforts.

Key Responsibilities

• Implement and maintain cybersecurity risk management frameworks and policies.
• Conduct vulnerability scans, penetration testing, and ongoing risk assessments.
• Maintain and update the cybersecurity risk register and track remediation efforts.
• Manage risk acceptance and exception processes, and report key risk indicators (KRIs).
• Assess and monitor third-party vendors for security and regulatory compliance (ISO 27001, SOC 2, GDPR, DPA2012).
• Ensure cybersecurity controls are integrated into business continuity and disaster recovery (BC/DR) plans.
• Support incident response planning and coordinate with internal teams and vendors.
• Communicate risks, findings, and mitigation strategies to stakeholders across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Engineering, or related field.
• 3+ years of cybersecurity risk management experience and 1-2 years in IT operations.
• Solid knowledge of cybersecurity frameworks (ISO 27001, NIST CSF) and data protection laws (GDPR, DPA2012).
• Strong analytical, problem-solving, and communication skills.
• Familiar with cybersecurity tools, technologies, and IT infrastructure.
• Entry-level certification preferred (e.g., CompTIA Security+ or equivalent).
• Able to manage multiple priorities and meet tight deadlines.