InfoSec Risk Analyst - Enable Secure Growth & Compliance

Emapta; Mandaluyong; Hybrid; PHP 135,000 - 165,000; Full time

Benefits offered by this job

Day 1 HMO coverage

Hybrid work arrangement

Office gyms (Ortigas & Makati)

Salary Advance Program

Upskilling through Emapta Academy

Job summary

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance. You will guide stakeholders and help adopt new technologies securely while maintaining client trust.

The role offers a hybrid work setup in Ortigas with a competitive salary and strong career growth opportunities across global teams.

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance.
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling.
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS.
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles.
• Experience developing and reviewing security policies, standards, processes, and controls.
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies.
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices.
• Familiarity with IAM, DLP, CASB, and related security controls.
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats.
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance.

Responsibilities

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Skills

Risk Assessments

Third-Party Risk

Secure by Design

ISO 27001

NIST

CIS

SOC 2 Type II

Vendor Assurance

Audit & Assurance

Security Policies

Job description

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance. You will guide stakeholders and help adopt new technologies securely while maintaining client trust.

The role offers a hybrid work setup in Ortigas with a competitive salary and strong career growth opportunities across global teams.