GRC Methodology Specialist – IT Risk & Controls

EY; Taguig; Presencial; PHP 1.200.000 - 1.800.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

EY Benefits package

Descripción de la vacante

EY in Taguig is seeking a Policy, Risk and Control (PRC) Methodology Specialist to administer and enhance the IT PRC Framework within EY's Information Security program. You will collaborate with global teams to align risk and control practices with industry standards and help embed methodology across projects and initiatives.

You will work with diverse stakeholders, communicate complex concepts effectively, and support continuous improvement of governance, risk, and compliance activities in a

Formación

• 3–5 years of progressive experience in IT security, information security, risk management, or related disciplines.
• Working knowledge of GRC principles and their application within technology environments.
• Familiarity with industry standards such as ISO, NIST, COBIT, PCI DSS, and UCF.

Responsabilidades

• Administer and enhance the IT PRC Framework underpinning Policy and Risk Management.
• Collaborate with Global Methodology Program Lead to advance service offerings and objectives.
• Support adoption and integration of the PRC framework across projects and programs.
• Develop and maintain documentation, processes, and artifacts throughout lifecycles.
• Engage stakeholders across Information Security, Enterprise Technology, Risk Management, Internal Audit, and Legal.

Conocimientos

IT risk management

GRC methodologies

Strong communication

Cross-functional teamwork

English language skills

Educación

Advanced degree in CS/InfoSec/Risk Mgmt

Herramientas

Archer

Unified Compliance tool

Descripción del empleo

EY in Taguig is seeking a Policy, Risk and Control (PRC) Methodology Specialist to administer and enhance the IT PRC Framework within EY's Information Security program. You will collaborate with global teams to align risk and control practices with industry standards and help embed methodology across projects and initiatives.

You will work with diverse stakeholders, communicate complex concepts effectively, and support continuous improvement of governance, risk, and compliance activities in a