IT.Security Analyst

CITCO INTERNATIONAL SUPPORT SERVICES LIMITED-PHILIPPINE ROHQ; Makati; On-site; PHP 700,000 - 900,000; Full time

Benefits offered by this job

Benefits package

Flexible working arrangements

Job summary

CITCO INTERNATIONAL SUPPORT SERVICES LIMITED-PHILIPPINE ROHQ, located in Makati, Philippines, is seeking an IT Security Analyst focused on Governance. The role involves governance, risk, and compliance tasks within the IT Security program.

You will interact with management and auditors, develop and report on ISMS status, and contribute to policy updates while maintaining security standards and awareness across global teams.

Qualifications

• BS/BA in Computer Science/Information Technology preferred.
• 3+ years in governance, risk & compliance roles.
• 2 years technical writing experience in IT security.
• Working knowledge of SharePoint, JIRA and Confluence a plus.
• Certifications such as CISA, CRISC, CISSP, CISM and related audit/security credentials are plus.
• Knowledge of HTML/web authoring tools is a plus.

Responsibilities

• Govern IT Security governance, risk and compliance projects.
• Report to IT Security GRC Department Manager and liaise with auditors.
• Create and manage phishing simulations and monthly reports.
• Respond to client due diligence questionnaires and requests.
• Produce quarterly management reports for internal/external use.
• Assist with IT Security policy reviews and ISO27001/COBIT compliance.

Skills

Governance

Risk & Compliance

Technical writing

English communication

IT security concepts

Education

BS/BA in Computer Science/Information Technology

Tools

Protiviti

SharePoint

JIRA

Confluence

Job description

About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

Position: IT Security –IT Security Analyst (Governance)

Location: Makati, Philippines

Your Role

1. IT Security is responsible for contributing to Citco’s Information Security Management System and program. As part of IT Security, you will be responsible for performing IT Security governance, risk and compliance projects with the following principal accountabilities outlined below.

• Report directly to the IT Security Governance, Risk, and Compliance (GRC) Department Manager. Cultivate and maintain excellent relationships with management and staff within the organization, internal and external auditors and security colleagues.

• Interact with client/internal board members on status of ISMS and IT Security program presentations

• Create and manage global, ethical phishing email scenarios through a third party and produce monthly phishing test reports.

• Respond to client due diligence questionnaires and requests

• Collect information and produce quarterly management reports for internal and external distribution

• Create and manage monthly IT Security newsletter releases

• Assist with IT Security policy and standards review and updates

• Strong understanding of ISO27001 and COBIT frameworks and assist with maintaining compliance with these guidelines

• Strong understanding of risk management principles and processes

• Maintain Confluence for IT Security Governance team

• SharePoint site maintenance and construction

• Employ principles of usability to ensure communication is delivered in the right format for the audience, and test communication deliverables throughout the project lifecycle to validate against the requirements.

• Work directly with integration teams to communicate product information

• Create and manage annual IT Security Awareness training programs for global delivery.

• Provide support in preparation of IT Security GRC materials, documentation, and annual planning and strategy process.

• Assist with our security metrics program and other miscellaneous duties.

• Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures.

• Train other staff members and other stakeholders, as necessary.

About You

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus

• Have three or more years working in governance, risk and compliance role

• Requires two years technical writing experience with strong foundation on IT security and IT-related topics

• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus

• Understanding of Basel II, SAS70, and SOC I & II requirements and other best practices a plus

• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus

• Knowledge of HTML and web authoring tools/languages is a plus

• Experience with graphic manipulation software also helpful

• Detail oriented, thorough and very organized work ethic

• Confident personality with ability to communicate clearly and succinctly in English

• Demonstrate flexibility and adaptability in approach to work

• Ability to effectively manage multiple concurrent projects/tasks with high attention to detail.

Our Benefits

• Your well being is of paramount importance to us, and central to our success. We provide a range of benefits, training and education support, and flexible working arrangements to help you achieve success in your career while balancing personal needs. Ask us about specific benefits in your location.

We embrace diversity, prioritizing the hiring of people from diverse backgrounds. Our inclusive culture is a source of pride and strength, fostering innovation and mutual respect.

Citco welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection.