Information Technology Risk Officer

PJ Lhuillier Group of Companies; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

PJ Lhuillier Group of Companies is seeking an IT risk and information security professional to support development and implementation of security policies and risk management across the organization. The role involves assessing IT systems, gathering threat data, and ensuring compliance with ISO 27001/27701, ISO 31000, and NIST guidelines.

The position requires a four-year degree (preferably IT or Business Administration) and at least two years of relevant experience, with willingness to work in

Qualifications

• Four-year degree, preferably in Information Technology or Business Administration.
• At least two years of work experience with in-depth knowledge of IT risk management and information security.
• Familiarity with ISO 31000, ISMS (ISO 27001/27701), NIST, COBIT, BSP IT risk circulars.

Responsibilities

• Conduct independent assessments of IT systems, platforms, and infrastructure to identify IT and information security risks.
• Support identification and evaluation of IT and information security risks across the organization.
• Assist in gathering data on threats, incidents, and vulnerabilities for proactive risk management.
• Collaborate in reviewing IT projects to ensure security controls and compliance.
• Assist in embedding IT risk management into the enterprise risk framework and ensure data security and compliance.

Skills

IT risk management

Information security

ISO 31000

ISO 27001/27701

NIST

COBIT

Education

4-year degree in IT or business administration

Job description

The position is responsible for providing support in the development and implementation of information technology and security policies and procedures of the organization. The position is also responsible for assisting the department head in ensuring that IT risk management and information security initiatives comply with applicable regulatory and legal requirements.

Duties and Responsibilities:

• Conducts independent assessments of existing IT systems, platforms (e.g., I-Click) and IT infrastructure to identify operational and information security risks and vulnerabilities.
• Supports the identification and evaluation of IT and information security risks in the organization.
• Helps gather data on emerging threats, security incidents and vulnerabilities.
• Collaborates in reviewing IT projects, system requirements, and partner integrations to assess IT risks ensuring security controls and compliance are met.
• Aids in integrating IT risk management processes into the enterprise-wide risk management framework ensuring risks related to data security, system integrity, and compliance are addressed.
• Documents any incidents of non-compliance with IT policies, including information security protocols to facilitate necessary follow-ups.
• Assists in ensuring that IT and security risks are formally acknowledged and accepted by the relevant risk owners.
• Supports in promoting a risk-aware culture by organizing related IT risk and cyber security awareness training.
• Monitors the implementation of IT risk mitigation strategies, information security measures, reviews of Key Performance Indicators (KPIs) and security incidents.

Qualifications:

• Graduate of any four (4) year course, preferably in Information Technology or Business Administration.
• At least two (2) years of work experience with in-depth knowledge of IT Risk Management and Information Security.
• Knowledgeable in ISO 31000, Information Security Management System (ISMS) and ISO 27001 and 27701, NIST, COBIT, BSP Circulars on IT Risk Management.
• Willing to work in Makati.