IT Controls And Compliance Analyst

PJ Lhuillier Group of Companies; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

PJ Lhuillier Group of Companies in Makati seeks an IT Risk & Compliance Specialist responsible for ensuring IT systems comply with company policies and regulatory requirements.

The role involves risk assessment, mitigation, governance, and IT/IS audits, with a focus on security controls, vulnerability management, and data protection. A four-year degree and at least two years of related experience are required, with onsite work in Makati.

Qualifications

• Graduated with a four-year degree in IT, CS, Cybersecurity, or related field.
• At least 2 years of work experience in IT risk management, information security, governance and IT/IS audits.
• Familiar with ISO 31000, ISO 27002, NIST, COBIT and BSP IT risk management regulations.
• Experience with security vulnerabilities and data loss prevention tools.
• Willing to work onsite in Makati.

Responsibilities

• Ensure IT systems and processes comply with company IT security policies and regulatory requirements.
• Lead risk assessment, mitigation, and information security initiatives.

Skills

IT Risk Management

Information Security

Governance

IT Audits

Regulatory Compliance

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Job description

Job Description:

Responsibilities

The position is responsible for ensuring the compliance of IT systems and processes in adherence with information technology and security policies of the company and applicable regulatory/legal requirements. The role is also involved with risk assessment, risk mitigation, risk management and information security initiatives.

Qualifications

• Candidate must be a graduate of any four (4) year course, preferably in Information Technology, Computer Science, Cybersecurity, or any related field
• With at least two (2) years of work experience with in-depth knowledge of IT Risk Management, Information Security and Governance, and IT/IS Audits
• Knowledgeable in ISO 31000, ISO 27002 and ISO 27002, NIST, COBIT, BSP Circulars on IT Risk Management and other related regulatory requirements, security standards and IT Governance frameworks
• Familiarity with security/vulnerabilities/data loss prevention technologies, software, and tools
• Willing to work onsite in Makati