IT.Security Analyst

Citco; Makati; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Citco is seeking an IT Security Analyst (Governance) to support its Information Security Management System and governance, risk and compliance initiatives in Makati, Philippines. You will report to the IT Security GRC Manager, interact with board members and auditors, and help create and manage governance deliverables including risk assessments, reports, and training.

The role requires a BS/BA in CS/IT or equivalent, at least three years in GRC, and strong English communication.

Qualifications

• BS/BA degree in a related field; IT/CS a plus.
• Minimum 3 years in governance, risk and compliance roles.
• Two years of technical writing experience with IT security focus.
• Experience with SharePoint, JIRA and Confluence is advantageous.
• Knowledge of HTML/web authoring tools is beneficial.

Responsibilities

• Contribute to Citco’s ISMS and IT Security program governance, risk and compliance projects.
• Interact with management, auditors and security colleagues to communicate status.
• Prepare quarterly management reports for internal and external distribution.
• Develop and manage IT Security awareness training programs for global delivery.
• Assist with policy reviews, standards updates, and maintenance of compliance with ISO27001 and COBIT.

Skills

Technical writing

Education

BS/BA in Computer Science/Information Technology

Tools

Protiviti

SharePoint

JIRA

Confluence

HTML

Job description

About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

Position: IT Security –IT Security Analyst (Governance)

Location: Makati, Philippines

Your Role

1. IT Security is responsible for contributing to Citco’s Information Security Management System and program. As part of IT Security, you will be responsible for performing IT Security governance, risk and compliance projects with the following principal accountabilities outlined below.

• Report directly to the IT Security Governance, Risk, and Compliance (GRC) Department Manager. Cultivate and maintain excellent relationships with management and staff within the organization, internal and external auditors and security colleagues.
• Interact with client/internal board members on status of ISMS and IT Security program presentations
• Create and manage global, ethical phishing email scenarios through a third party and produce monthly phishing test reports.
• Respond to client due diligence questionnaires and requests
• Collect information and produce quarterly management reports for internal and external distribution
• Create and manage monthly IT Security newsletter releases
• Assist with IT Security policy and standards review and updates
• Strong understanding of ISO27001 and COBIT frameworks and assist with maintaining compliance with these guidelines
• Strong understanding of risk management principles and processes
• Maintain Confluence for IT Security Governance team
• SharePoint site maintenance and construction
• Employ principles of usability to ensure communication is delivered in the right format for the audience, and test communication deliverables throughout the project lifecycle to validate against the requirements.
• Work directly with integration teams to communicate product information
• Create and manage annual IT Security Awareness training programs for global delivery.
• Provide support in preparation of IT Security GRC materials, documentation, and annual planning and strategy process.
• Assist with our security metrics program and other miscellaneous duties.
• Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures.
• Train other staff members and other stakeholders, as necessary.

About You

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus
• Have three or more years working in governance, risk and compliance role
• Requires two years technical writing experience with strong foundation on IT security and IT-related topics
• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus
• Understanding of Basel II, SAS70, and SOC I & II requirements and other best practices a plus
• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus
• Knowledge of HTML and web authoring tools/languages is a plus
• Experience with graphic manipulation software also helpful
• Detail oriented, thorough and very organized work ethic
• Confident personality with ability to communicate clearly and succinctly in English
• Demonstrate flexibility and adaptability in approach to work
• Ability to effectively manage multiple concurrent projects/tasks with high attention to detail.