IT Security GRC Analyst — Flexible Work & Impact

CITCO INTERNATIONAL SUPPORT SERVICES LIMITED-PHILIPPINE ROHQ; Makati; On-site; PHP 700,000 - 900,000; Full time

Benefits offered by this job

Benefits package

Flexible working arrangements

Job summary

CITCO INTERNATIONAL SUPPORT SERVICES LIMITED-PHILIPPINE ROHQ, located in Makati, Philippines, is seeking an IT Security Analyst focused on Governance. The role involves governance, risk, and compliance tasks within the IT Security program.

You will interact with management and auditors, develop and report on ISMS status, and contribute to policy updates while maintaining security standards and awareness across global teams.

Qualifications

• BS/BA in Computer Science/Information Technology preferred.
• 3+ years in governance, risk & compliance roles.
• 2 years technical writing experience in IT security.
• Working knowledge of SharePoint, JIRA and Confluence a plus.
• Certifications such as CISA, CRISC, CISSP, CISM and related audit/security credentials are plus.
• Knowledge of HTML/web authoring tools is a plus.

Responsibilities

• Govern IT Security governance, risk and compliance projects.
• Report to IT Security GRC Department Manager and liaise with auditors.
• Create and manage phishing simulations and monthly reports.
• Respond to client due diligence questionnaires and requests.
• Produce quarterly management reports for internal/external use.
• Assist with IT Security policy reviews and ISO27001/COBIT compliance.

Skills

Governance

Risk & Compliance

Technical writing

English communication

IT security concepts

Education

BS/BA in Computer Science/Information Technology

Tools

Protiviti

SharePoint

JIRA

Confluence

Job description

CITCO INTERNATIONAL SUPPORT SERVICES LIMITED-PHILIPPINE ROHQ, located in Makati, Philippines, is seeking an IT Security Analyst focused on Governance. The role involves governance, risk, and compliance tasks within the IT Security program.

You will interact with management and auditors, develop and report on ISMS status, and contribute to policy updates while maintaining security standards and awareness across global teams.