IT Security GRC Analyst: Governance & Compliance

The Citco Group Limited; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Citco is seeking an IT Security Analyst (Governance) to join the Makati, Philippines office. You will contribute to Citco’s Information Security Management System and drive governance, risk and compliance initiatives across the organization.

The role requires collaboration with management, auditors and security colleagues to strengthen the security posture. You will report to the GRC Department Manager, lead reporting and communications, review policies, and help maintain awareness through

Qualifications

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus
• Have three or more years working in governance, risk and compliance role
• Requires two years technical writing experience with strong foundation on IT security and IT-related topics
• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus
• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus
• Knowledge of HTML and web authoring tools/languages is a plus

Responsibilities

• IT Security is responsible for contributing to Citco’s ISMS and program; governance, risk and compliance projects
• Report to the IT Security GRC Department Manager; maintain relationships with management, auditors, and security staff
• Interact with client/internal board members on ISMS status and security program presentations
• Create and manage phishing scenarios and monthly phishing test reports
• Respond to client due diligence questionnaires and requests
• Produce quarterly management reports for internal and external distribution
• Create and manage monthly IT Security newsletter releases
• Assist with IT Security policy and standards reviews and updates
• Maintain compliance with ISO27001 and COBIT frameworks
• Maintain Confluence for IT Security Governance team; manage SharePoint site
• Communicate product information with integration teams; support security awareness training
• Assist with security metrics program and other duties; stay updated on security trends

Skills

GRC experience

IT security

Policy & standards

Technical writing

ISO27001 knowledge

Risk management

Education

BS/BA in Computer Science/Information Technology

Tools

SharePoint

JIRA

Confluence

Job description

Citco is seeking an IT Security Analyst (Governance) to join the Makati, Philippines office. You will contribute to Citco’s Information Security Management System and drive governance, risk and compliance initiatives across the organization.

The role requires collaboration with management, auditors and security colleagues to strengthen the security posture. You will report to the GRC Department Manager, lead reporting and communications, review policies, and help maintain awareness through