IT Policy & GRC Associate — Risk & ISMS Focus

Nityo Infotech Inc.; Mandaluyong; On-site; PHP 334,800 - 558,000; Full time

Benefits offered by this job

Government Mandated Benefits

Job summary

A leading technology services provider in Mandaluyong is looking for a qualified individual to help manage IT service operations with a focus on governance, risk, and compliance. Candidates should possess a Bachelor’s degree in IT or related fields, along with 1–2 years of relevant experience. Responsibilities include implementing security controls, conducting risk assessments, and ensuring compliance with company policies. Strong analytical skills and familiarity with ITSM processes are essential for success in this role.

Qualifications

• 1–2 years of experience in IT service operations or governance roles.
• Experience performing enterprise IT risk assessments based on ISO 31000.
• Experience conducting vendor security assessments based on ISO27001:2013.

Responsibilities

• Implement information security controls and compliance programs.
• Evaluate IT risks and support the development of security policies.
• Conduct information security and IT risk assessments.

Skills

Working knowledge of IT service management processes

Ability to remain effective under pressure

Strong analytical and problem-solving skills

Skilled in governance, risk, and compliance activities

General working knowledge of information security frameworks

Understanding of security standards and regulatory requirements

Familiarity with ITSM and GRC tools

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field

Tools

ServiceNow

Jira

Job description

A leading technology services provider in Mandaluyong is looking for a qualified individual to help manage IT service operations with a focus on governance, risk, and compliance. Candidates should possess a Bachelor’s degree in IT or related fields, along with 1–2 years of relevant experience. Responsibilities include implementing security controls, conducting risk assessments, and ensuring compliance with company policies. Strong analytical skills and familiarity with ITSM processes are essential for success in this role.