IT Compliance Analyst

Computer Professionals Inc.; Pasig; Hybrid; PHP 500,000 - 700,000; Full time

Job summary

Computer Professionals Inc. seeks an IT Compliance Analyst to ensure IT Operations align with internal and external compliance standards. You will work with Allianz rules, regulations, and policies, and communicate auditor findings and remediations across stakeholders.

The role requires 4–6 years in Information Security or related fields, familiarity with NIST/ISO 27001/PCI, and potential hybrid work with occasional onsite in Makati.

Qualifications

• At least 4–6 years of experience in Information Security or a related domain.
• Knowledge and understanding of Information Security and IT concepts and security standards such as NIST, ISO 27001 or PCI.
• Nice to have certifications: CISSP, CRISC, CISA, CISM, or related GIAC.

Responsibilities

• Facilitate the audit and assessment conduct for internal and external auditors/assessors.
• Evaluate and analyze audit findings and work with stakeholders to plan remediation activities.
• Identify and report control nonconformities that affect strategic compliance objectives and recommend remediation to reduce system risk.
• Participate in audit conducts to ensure IT Compliance.
• Communicate audit findings to stakeholders to ensure compliance with standards.
• Assess, validate, document and support the implementation of internal controls as part of ongoing compliance efforts.

Job description

The IT Compliance Analyst ensures that IT Operations are in line with internal and external industry compliance standards. They are experts in Allianz Functional Rules, Regulations, Standards and Policies. They are excellent communicators of auditor findings, remediations and advisories allowing understanding among Compliance stakeholders.

What You Will Be Doing

• Facilitate the audit and assessment conduct for internal and external auditors/assessors.
• Evaluate and analyze any audit findings and work with stakeholders to plan remediation activities.
• Identify and report control nonconformities that affect strategic compliance objectives and make recommendations to stakeholders, aimed to reduce the likelihood of system failure.
• Participates in audit conducts to ensure IT Compliance
• Effectively communicate audit findings to stakeholders to ensure compliance and adherence to standards.
• Assess, validate, document and support the implementation of internal controls as part of on-going compliance efforts (Internal/External/Regional/Security Audit.)
• Assist the compliance team with reviewing and tracking outstanding information security findings and remediations, especially as they relate to policy, procedures and risk gaps.
• Participate in driving education and awareness of Information security-related risks to Business, Users, IT Teams and reviewing the Information Security Controls implemented in the organization.
• Participate in making recommendations to ensure effective and consistent control implementations and testing procedures to achieve Continuous Monitoring and Continuous Audit capabilities.

What We're Looking For

• At least4-6 years, experience inInformation Securityor related domain
• Knowledge and understanding ofInformation Security and IT Concepts and Security Standards Framework such as NIST, ISO 27001 or PCI
• Nice to have certifications: CISSP, CRISC, CISA, CISM, or related GIAC
• Okay to accept project-based employment
• Okay to accept hybrid work setup with once or twice a week onsite in Makati