InfoSec Risk Analyst - Secure by Design (Hybrid)

Emapta Global; Mandaluyong; Hybrid; PHP 1,004,000 - 1,674,000; Full time

Benefits offered by this job

HMO coverage

Competitive salary

Ortigas office

Salary advance

Emapta Academy courses

Gym access

Lifestyle perks

Employee referrals

Government benefits

Annual leave 20 days

Job summary

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance across global teams.

You will provide practical guidance to stakeholders, help introduce new technologies securely, meet assurance obligations, and protect information while supporting long-term career growth. This hybrid role offers Ortigas-based work setup and ongoing upskilling opportunities.

Qualifications

• At least 1 year of experience in information security, cybersecurity, risk, audit, or assurance
• Proven experience conducting Security Risk Assessments, Third-Party Security Risk Assessments, Secure by Design reviews, and Threat Modelling
• Strong knowledge of ISO 27001 and security control frameworks, with working knowledge of NIST and CIS
• Solid understanding of SOC 2 Type II, vendor assurance, and audit and assurance principles
• Experience developing and reviewing security policies, standards, processes, and controls
• Good understanding of risks involving security, privacy, cloud environments, AI, and emerging technologies
• Knowledge of vulnerability management, penetration testing, secure coding, and SDLC security practices
• Familiarity with IAM, DLP, CASB, and related security controls
• Understanding of incident response, cyber crisis management, vulnerability scoring, threat intelligence, and emerging security threats
• Strong stakeholder engagement, communication, and influencing skills, with the ability to provide practical security guidance

Responsibilities

• Identify security and privacy risks early across new technologies, projects, and business initiatives, and recommend proportionate controls.
• Conduct third-party security assessments before supplier onboarding and throughout the vendor lifecycle.
• Apply Secure by Design and Privacy by Design principles to business processes, technology initiatives, and project delivery.
• Provide stakeholders with clear, practical, and risk-based security advice that supports business objectives.
• Review privacy impacts and recommend appropriate measures to reduce exposure and strengthen compliance.
• Respond to client, regulatory, and assurance requests accurately, consistently, and within required timelines.
• Maintain and improve security policies, standards, controls, and governance processes so they remain aligned with evolving business needs.
• Strengthen employee awareness of security and privacy responsibilities through ongoing guidance and awareness activities.
• Track security culture and risk indicators to identify opportunities for continued improvement.
• Reduce organizational risk and reinforce client confidence through effective vendor assurance, privacy practices, and security governance.
• Promote security and privacy as practical business enablers that support growth without creating unnecessary friction.

Skills

Security risk assessment

Third-party risk

Secure by design

ISO 27001

NIST/CIS

SOC 2 Type II

Vendor assurance

Security policies

Cloud security

IAM

DLP

CASB

Incident response

Stakeholder engagement

Job description

Emapta Philippines is seeking an Information Security Risk Analyst to assess third-party and technology risks, embed Secure by Design practices, and strengthen security governance across global teams.

You will provide practical guidance to stakeholders, help introduce new technologies securely, meet assurance obligations, and protect information while supporting long-term career growth. This hybrid role offers Ortigas-based work setup and ongoing upskilling opportunities.