InfoSec Risk & Compliance Analyst

Acquire Intelligence; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Acquire Intelligence is seeking a Risk Management and Compliance Officer at the Ortigas Site in Pasig, Philippines. The role focuses on maintaining security controls under the ISMS, coordinating audits, and driving risk management programs in line with ISO standards.

The role requires collaboration with process owners to remediate non-compliances, deliver timely reports to leadership, and uphold data privacy and information security practices.

Qualifications

• Strong analytical and problem-solving skills.
• Excellent oral and written communication skills.
• Knowledge of company processes and information security controls.
• Ability to work collaboratively and independently.
• Critical thinking and decision-making skills.
• Experience working in a large fast-paced organizational environment.
• Flexibility with shifting work schedules.
• Preferably with knowledge of ISO 27001, ISO 31000, PCI-DSS, SOC and HIPAA.

Responsibilities

• Maintain the integrity and currency of critical business documentation through regular reviews and audits.
• Drive the Information Security and Risk Management program using ISO 27001 and 31000 frameworks.
• Own the internal audit lifecycle from planning to closure with an annual audit calendar.
• Identify emerging risks and translate findings into corrective action plans.
• Provide timely, accurate reports on Information Risk Management and Internal Audit programs to leadership.
• Govern remediation processes and ensure timely closure of corrective actions.
• Support successful internal and external audits with organized evidence and remediation commitments.
• Peer-review Risk Assessments and Compliance Audit Reports for quality and consistency.

Skills

Analytical skills

Communication skills

InfoSec controls

ISO 27001 knowledge

Audit coordination

Job description

Acquire Intelligence is seeking a Risk Management and Compliance Officer at the Ortigas Site in Pasig, Philippines. The role focuses on maintaining security controls under the ISMS, coordinating audits, and driving risk management programs in line with ISO standards.

The role requires collaboration with process owners to remediate non-compliances, deliver timely reports to leadership, and uphold data privacy and information security practices.