IT.Security Analyst

The Citco Group Limited; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Citco is seeking an IT Security Analyst (Governance) to join the Makati, Philippines office. You will contribute to Citco’s Information Security Management System and drive governance, risk and compliance initiatives across the organization.

The role requires collaboration with management, auditors and security colleagues to strengthen the security posture. You will report to the GRC Department Manager, lead reporting and communications, review policies, and help maintain awareness through

Qualifications

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus
• Have three or more years working in governance, risk and compliance role
• Requires two years technical writing experience with strong foundation on IT security and IT-related topics
• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus
• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus
• Knowledge of HTML and web authoring tools/languages is a plus

Responsibilities

• IT Security is responsible for contributing to Citco’s ISMS and program; governance, risk and compliance projects
• Report to the IT Security GRC Department Manager; maintain relationships with management, auditors, and security staff
• Interact with client/internal board members on ISMS status and security program presentations
• Create and manage phishing scenarios and monthly phishing test reports
• Respond to client due diligence questionnaires and requests
• Produce quarterly management reports for internal and external distribution
• Create and manage monthly IT Security newsletter releases
• Assist with IT Security policy and standards reviews and updates
• Maintain compliance with ISO27001 and COBIT frameworks
• Maintain Confluence for IT Security Governance team; manage SharePoint site
• Communicate product information with integration teams; support security awareness training
• Assist with security metrics program and other duties; stay updated on security trends

Skills

GRC experience

IT security

Policy & standards

Technical writing

ISO27001 knowledge

Risk management

Education

BS/BA in Computer Science/Information Technology

Tools

SharePoint

JIRA

Confluence

Job description

About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

Position:

IT Security –IT Security Analyst (Governance)

Location:

Makati, Philippines

Your Role

1. IT Security is responsible for contributing to Citco’s Information Security Management System and program. As part of IT Security, you will be responsible for performing IT Security governance, risk and compliance projects with the following principal accountabilities outlined below.

• Report directly to the IT Security Governance, Risk, and Compliance (GRC) Department Manager. Cultivate and maintain excellent relationships with management and staff within the organization, internal and external auditors and security colleagues.
• Interact with client/internal board members on status of ISMS and IT Security program presentations
• Create and manage global, ethical phishing email scenarios through a third party and produce monthly phishing test reports.
• Respond to client due diligence questionnaires and requests
• Collect information and produce quarterly management reports for internal and external distribution
• Create and manage monthly IT Security newsletter releases
• Assist with IT Security policy and standards review and updates
• Strong understanding of ISO27001 and COBIT frameworks and assist with maintaining compliance with these guidelines
• Strong understanding of risk management principles and processes
• Maintain Confluence for IT Security Governance team
• SharePoint site maintenance and construction
• Employ principles of usability to ensure communication is delivered in the right format for the audience, and test communication deliverables throughout the project lifecycle to validate against the requirements.
• Work directly with integration teams to communicate product information
• Create and manage annual IT Security Awareness training programs for global delivery.
• Provide support in preparation of IT Security GRC materials, documentation, and annual planning and strategy process.
• Assist with our security metrics program and other miscellaneous duties.
• Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures.
• Train other staff members and other stakeholders, as necessary.

About You

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus
• Have three or more years working in governance, risk and compliance role
• Requires two years technical writing experience with strong foundation on IT security and IT-related topics
• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus
• Understanding of Basel II, SAS70, and SOC I & II requirements and other best practices a plus
• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus
• Knowledge of HTML and web authoring tools/languages is a plus
• Experience with graphic manipulation software also helpful
• Detail oriented, thorough and very organized work ethic
• Confident personality with ability to communicate clearly and succinctly in English
• Demonstrate flexibility and adaptability in approach to work
• Ability to effectively manage multiple concurrent projects/tasks with high attention to detail.