IT Risk & Security Compliance Lead (Makati)

PJ Lhuillier Group of Companies; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

PJ Lhuillier Group of Companies is seeking an IT risk and information security professional to support development and implementation of security policies and risk management across the organization. The role involves assessing IT systems, gathering threat data, and ensuring compliance with ISO 27001/27701, ISO 31000, and NIST guidelines.

The position requires a four-year degree (preferably IT or Business Administration) and at least two years of relevant experience, with willingness to work in

Qualifications

• Four-year degree, preferably in Information Technology or Business Administration.
• At least two years of work experience with in-depth knowledge of IT risk management and information security.
• Familiarity with ISO 31000, ISMS (ISO 27001/27701), NIST, COBIT, BSP IT risk circulars.

Responsibilities

• Conduct independent assessments of IT systems, platforms, and infrastructure to identify IT and information security risks.
• Support identification and evaluation of IT and information security risks across the organization.
• Assist in gathering data on threats, incidents, and vulnerabilities for proactive risk management.
• Collaborate in reviewing IT projects to ensure security controls and compliance.
• Assist in embedding IT risk management into the enterprise risk framework and ensure data security and compliance.

Skills

IT risk management

Information security

ISO 31000

ISO 27001/27701

NIST

COBIT

Education

4-year degree in IT or business administration

Job description

PJ Lhuillier Group of Companies is seeking an IT risk and information security professional to support development and implementation of security policies and risk management across the organization. The role involves assessing IT systems, gathering threat data, and ensuring compliance with ISO 27001/27701, ISO 31000, and NIST guidelines.

The position requires a four-year degree (preferably IT or Business Administration) and at least two years of relevant experience, with willingness to work in