Information Security Risk Analyst | Hybrid | Weekends Off | Up to PHP150K

Emapta; Mandaluyong; Hybrid; PHP 135,000 - 165,000; Full time

Benefits offered by this job

Day 1 HMO coverage

Hybrid work arrangement

Office gyms (Ortigas & Makati)

Salary Advance Program

Upskilling through Emapta Academy

Job summary

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance. You will guide stakeholders and help adopt new technologies securely while maintaining client trust.

The role offers a hybrid work setup in Ortigas with a competitive salary and strong career growth opportunities across global teams.

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance.
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling.
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS.
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles.
• Experience developing and reviewing security policies, standards, processes, and controls.
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies.
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices.
• Familiarity with IAM, DLP, CASB, and related security controls.
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats.
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance.

Responsibilities

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Skills

Risk Assessments

Third-Party Risk

Secure by Design

ISO 27001

NIST

CIS

SOC 2 Type II

Vendor Assurance

Audit & Assurance

Security Policies

Job description

Protect Professional Services Through Smarter Security Risk Management

Support a leading Australian professional services firm providing audit, tax, consulting, risk, technology, and advisory expertise across diverse industries. Its specialists are trusted by private and mid-market businesses, listed and multinational companies, not-for-profit organizations, and government entities navigating complex business, regulatory, technology, and risk requirements.

Security works best when it enables progress without compromising protection. As an Information Security Risk Analyst, you'll assess third-party and technology risks, embed Secure by Design practices, strengthen security governance, and provide practical guidance to stakeholders. Your expertise will help the business introduce new technologies confidently while protecting information, meeting assurance obligations, and maintaining client trust. With Emapta, develop your international security career with long-term stability, professional growth, and exposure to global teams.

Your Career Snapshot

• Employment Type: Full-time
• Shift: Day Shift, Weekends Off
• Salary: Up to PHP 150,000
• Work Setup: Hybrid, Ortigas

Benefits That Support Your Career and Life

• Day 1 HMO coverage with free dependent
• Competitive Salary Package
• Hybrid work arrangement
• Prime office location in Ortigas with easy access to MRT stations, restaurants, and banks
• Fixed weekends off
• Salary Advance Program through our banking partner, subject to eligibility and bank assessment and available to account holders with a minimum of 6 months of company tenure
• Unlimited upskilling through Emapta Academy courses (Want to know more? Visit https://emapta.com/training-calendar/)
• Free 24/7 access to Emapta office gyms in Ortigas and Makati with a free physical fitness trainer
• Exclusive Emapta Lifestyle perks, including hotel and restaurant discounts
• Unlimited opportunities for employee referral incentives across the organization
• Standard government and Emapta benefits
• 20 annual leave credits for use at your discretion, including 5 credits convertible to cash
• Fun employee engagement activities
• Mentorship and exposure to global leaders and teams
• Career growth opportunities
• Diverse and supportive work environment

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles
• Experience developing and reviewing security policies, standards, processes, and controls
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices
• Familiarity with IAM, DLP, CASB, and related security controls
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance

Your Daily Tasks

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Join the Top 1% Talent. A Better Career. A Better Life.

Welcome to Emapta Philippines, where high-performing professionals build long-term global careers with leading international companies. Recognized as one of HR Asia's Best Companies to Work For in Asia 2025 and winner of Inspiring Workplaces Australasia 2026, Emapta delivers a workplace defined by stability, growth, and purpose. Here, your career moves forward with meaningful opportunities, world-class support, and a culture built for excellence.