Information Security Risk Analyst

Emapta Global; Mandaluyong; Hybrid; PHP 1,004,000 - 1,674,000; Full time

Benefits offered by this job

HMO coverage

Competitive salary

Ortigas office

Salary advance

Emapta Academy courses

Gym access

Lifestyle perks

Employee referrals

Government benefits

Annual leave 20 days

Job summary

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance across global teams.

You will provide practical guidance to stakeholders, help introduce new technologies securely, meet assurance obligations, and protect information while supporting long-term career growth. This hybrid role offers Ortigas-based work setup and ongoing upskilling opportunities.

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles
• Experience developing and reviewing security policies, standards, processes, and controls
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices
• Familiarity with IAM, DLP, CASB, and related security controls
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance

Responsibilities

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Skills

Security risk assessment

Third-party risk

Secure by design

ISO 27001

NIST/CIS

SOC 2 Type II

Vendor assurance

Security policies

Cloud security

IAM

DLP

CASB

Incident response

Stakeholder engagement

Job description

Protect Professional Services Through Smarter Security Risk Management

Support a leading Australian professional services firm providing audit, tax, consulting, risk, technology, and advisory expertise across diverse industries. Its specialists are trusted by private and mid-market businesses, listed and multinational companies, not-for-profit organizations, and government entities navigating complex business, regulatory, technology, and risk requirements.

Security works best when it enables progress without compromising protection. As an Information Security Risk Analyst, you'll assess third-party and technology risks, embed Secure by Design practices, strengthen security governance, and provide practical guidance to stakeholders. Your expertise will help the business introduce new technologies confidently while protecting information, meeting assurance obligations, and maintaining client trust. With Emapta, develop your international security career with long-term stability, professional growth, and exposure to global teams.

• Employment Type: Full-time
• Salary: Up to PHP 150,000
• Work Setup: Hybrid, Ortigas

Benefits That Support Your Career and Life

• Day 1 HMO coverage with free dependent
• Competitive Salary Package
• Prime office location in Ortigas with easy access to MRT stations, restaurants, and banks
• Salary Advance Program through our banking partner, subject to eligibility and bank assessment and available to account holders with a minimum of 6 months of company tenure
• Unlimited upskilling through Emapta Academy courses (Want to know more? Visit https://emapta.com/training-calendar/)
• Free 24/7 access to Emapta office gyms in Ortigas and Makati with a free physical fitness trainer
• Exclusive Emapta Lifestyle perks, including hotel and restaurant discounts
• Unlimited opportunities for employee referral incentives across the organization
• Standard government and Emapta benefits
• 20 annual leave credits for use at your discretion, including 5 credits convertible to cash
• Mentorship and exposure to global leaders and teams
• Diverse and supportive work environment

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles
• Experience developing and reviewing security policies, standards, processes, and controls
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices
• Familiarity with IAM, DLP, CASB, and related security controls
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance

Your Daily Tasks

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Join the Top 1% Talent. A Better Career. A Better Life.

Welcome to Emapta Philippines, where high-performing professionals build long-term global careers with leading international companies. Recognized as one of HR Asia's Best Companies to Work For in Asia 2025 and winner of Inspiring Workplaces Australasia 2026, Emapta delivers a workplace defined by stability, growth, and purpose. Here, your career moves forward with meaningful opportunities, world-class support, and a culture built for excellence.