It Security Analyst

Elmo Software; Metro Manila; On-site; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

Hybrid work setup

15 vacation leave days and 10 sick day

10 Philippine public holidays

Birthday leave and one annual You-Day

13th-month pay, paid every December

HMO from Day 1, including one dependet

Group life insurance

Work peripherals

Quarterly team meet-ups and engagement

Job summary

ELMO Software Pty Ltd is seeking a security/compliance professional to manage ISMS and AI governance, maintain security records, and coordinate audits. You will support policies, risk assessment, and customer/security queries while collaborating across teams to uphold ISO-adherent security practices.

Join a dynamic team in a hybrid environment to drive security initiatives, privacy protection, and supplier risk reviews for a growing tech organisation serving ANZ customers.

Qualifications

• A bachelor’s degree in business administration, information technology, information security, security studies or a related discipline—or equivalent practical experience.
• Approximately 2–4 years’ experience supporting information security, governance, risk or compliance activities, preferably in a technology or cloud-based environment.
• Experience with information security frameworks or standards such as ISO 27001, NIST, ISO/IEC 42001, ISO 9001 or similar.
• Working knowledge of risk management, including risk identification, assessment, treatment planning and monitoring.
• Experience supporting security policies, standards, procedures, audits or assurance activities.
• A basic understanding of penetration testing and the ability to support testing coordination, evidence collection and remediation follow-up.
• Strong written and verbal communication skills, with excellent attention to detail and record-keeping.
• The ability to manage recurring activities, meet deadlines, maintain confidentiality and escalation issues appropriately.
• A willingness to learn, take direction and build your capability across information security, risk, assurance and AI governance.

Responsibilities

• Support the operation and continuous improvement of our Information Security Management System (ISMS) and Artificial Intelligence Management System (AIMS).
• Maintain policies, procedures, registers, evidence and supporting records for security, privacy, AI governance and WHS activities.
• Support customer security questionnaires, due-diligence requests, tender responses and supplier reviews.
• Assist with internal and external audits, certification activities, business integrations and penetration-testing coordination.
• Support day-to-day security operations, including control monitoring, evidence collection, risk-register updates and remediation tracking.
• Assist with security incident response, including triage, evidence gathering, incident records, communications and post-incident actions.
• Support the ELMO Security Toolkit, including vulnerability and exception tracking and preparation of assurance evidence.
• Maintain AI governance records and support AI, security, privacy, data and supplier risk assessments.
• Support WHS registers, action plans, compliance records and reporting, escalating material risks and overdue actions promptly.
• Prepare clear status updates and maintain accurate records for the Head of Information Security and relevant governance forums.

Education

Bachelor's degree in business administration, information technology, information security, security studies

Tools

ISO 27001

NIST

Job description

Job Type: Permanent - Full Time

Location: Manila

Job Category: IT

Who We Are…

Founded in 2002, ELMO Software is the trusted provider of HR technology solutions to 2,000+ mid-sized organisations and more than one million end users across Australia and New Zealand.

With a comprehensive suite of ISO-certified solutions that span the full employee lifecycle, ELMO Software is designed to scale as organisations grow. Flexible and configurable, ELMO’s one-stop HRIS fits to your specific needs and workflows.Through powerful technology, automation, data and analytics, ELMO Software empowers HR professionals to play an integral role in company decision making.

Life & Culture…

At ELMO you will be joining an epic team with the opportunity to make a big impact. We foster an authentic, collaborative, fun working environment and being an ELMOnian means you're part of an amazing team that will push you to grow, support you with challenges and allow you to shine. Some of our benefits include:

• Hybrid work setup


• 15 vacation leave days and 10 sick leave days


• 10 Philippine public holidays


• Birthday leave and one annual You-Day


• 13th-month pay, paid every December


• HMO from Day 1, including one dependent


• Group life insurance


• Work peripherals


• Quarterly team meet-ups and engagement activities

Our Values

• Reimagine What's Possible - We believe innovation is human at its core. By staying open, fearless, and adaptive, we continuously push boundaries - while keeping people at the heart of everything we do.


• Obsess over Customers – Everything we do is designed to positively impact our customers.


• Help Others Thrive - Be they colleagues, communities or customers, we champion ways to help others thrive.


• Be Fearlessly Optimistic - We bring unwavering positivity to any challenge, as we know it will drive meaningful change.

Please note: Our internal Talent Acquisition team has got this covered, we’re not open to using an agency for this role.

Job Description

What you’ll do

• Support the operation and continuous improvement of our Information Security Management System (ISMS) and Artificial Intelligence Management System (AIMS).


• Maintain policies, procedures, registers, evidence and supporting records for security, privacy, AI governance and WHS activities.


• Support customer security questionnaires, due-diligence requests, tender responses and supplier reviews.


• Assist with internal and external audits, certification activities, business integrations and penetration-testing coordination.


• Support day-to-day security operations, including control monitoring, evidence collection, risk-register updates and remediation tracking.


• Assist with security incident response, including triage, evidence gathering, incident records, communications and post-incident actions.


• Support the ELMO Security Toolkit, including vulnerability and exception tracking and preparation of assurance evidence.


• Maintain AI governance records and support AI, security, privacy, data and supplier risk assessments.


• Support WHS registers, action plans, compliance records and reporting, escalating material risks and overdue actions promptly.


• Prepare clear status updates and maintain accurate records for the Head of Information Security and relevant governance forums.

Desired Skills And Experience

What you’ll bring

• A bachelor’s degree in business administration, information technology, information security, security studies or a related discipline—or equivalent practical experience.


• Approximately 2–4 years’ experience supporting information security, governance, risk or compliance activities, preferably in a technology or cloud-based environment.


• Experience with information security frameworks or standards such as ISO 27001, NIST, ISO/IEC 42001, ISO 9001 or similar.


• Working knowledge of risk management, including risk identification, assessment, treatment planning and monitoring.


• Experience supporting security policies, standards, procedures, audits or assurance activities.


• A basic understanding of penetration testing and the ability to support testing coordination, evidence collection and remediation follow-up.


• Strong written and verbal communication skills, with excellent attention to detail and record-keeping.


• The ability to manage recurring activities, meet deadlines, maintain confidentiality and escalation issues appropriately.


• A willingness to learn, take direction and build your capability across information security, risk, assurance and AI governance.

ELMO Software Pty Ltd is an equal opportunity employer, and we encourage applicants from diverse backgrounds to join our team - a commitment reflected in our Reconciliation Action Plan .

As the first software company in Australia and New Zealand to achieve ISO 42001:2023 Certification, we're passionate about responsible, secure and safe AI. Key to this role is an awareness of data privacy and security, as you'll be working with sensitive employee data in accordance with our ISO 27001:2022 Certified security policies.