IT Security Officer

China Construction Bank; Santo Niño 1st; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

China Construction Bank Philippines is seeking an experienced IT Risk & Compliance Manager to oversee IT risk management, security governance, and regulatory compliance at the branch. The role includes building data security mechanisms, conducting cyber incident response, and delivering regular governance reports to Head Office, while collaborating with cross-functional teams to address audit findings.

Candidates should have a Bachelor’s degree, at least 3 years in banking IT risk, and strong

Qualifications

• Bachelor’s Degree in Computer Science, Information System, Cyber security, or a related discipline.
• At least 3 years’ of experience in IT risk management, IT security management or IT audits in Banking industry.
• Strong understanding of local and China regulations, including MAS TRM, Cyber Hygiene, PDPA and IT risk management and cyber security regulations of China.
• Strong Chinese reading, writing and communication skills to understand Head Office’s policies, write reports to Head Office and communicate with Head Office colleagues.
• Relevant certifications in IT Governance, risk management, or compliance are advantageous.
• Proven ability to work collaboratively with cross-functional teams to address challenges and implement practical solutions for IT risk and compliance management.
• Strong self-initiative and self-study spirit.

Responsibilities

• Review regulatory obligations and Head Office IT controls to ensure compliant risk management.
• Continuously evaluate IT risk exposure and align mitigation with business risk appetite.
• Develop and improve data security mechanisms, including asset management and monitoring.
• Lead incident response and mitigation for cyber and data security incidents.
• Prepare reports for senior management and Head Office on governance and remediation progress.

Skills

Regulatory knowledge

IT risk management

IT security governance

Cross-functional collaboration

Chinese language skills

Self-motivation

Education

Bachelor’s Degree in Computer Science / IT / Cyber security

3+ years IT risk management or IT audits in Banking

IT governance / compliance certifications (advantageous)

Tools

Regulatory frameworks

Job description

Job Description

• Compliance and Risk Evaluations: Review and assess compliance with relevant regulatory obligations &Head Office requirements of IT risk management and cyber security governance, verify that internal IT policies and controls are aligned with best practices to minimize risks.
• Ongoing IT Risk Management and Security Governance: Continuously evaluate the branch’s IT risk exposure, ensuring that risk mitigation efforts align with business goals and the organization’s risk appetite.
• Construction and improvement of the data security mechanism for the branch, including data asset management, assessment, risk monitoring, risk remediation, and other work.
• Conducting emergency response and mitigation of cyber security and data security incidents.
• Deliver regular reports to senior management and Head Office, outlining the status of IT governance, compliance efforts and the progress of remediation actions on audit findings and risk assessments.

Qualification

• Bachelor’s Degree in Computer Science, Information System, Cyber security, or a related discipline.
• At least 3 years’ of experience in IT risk management, IT security management or IT audits in Banking industry.
• Strong understanding of local and China regulations, including MAS TRM, Cyber Hygiene, PDPA and IT risk management and cyber security regulations of China.
• Strong Chinese reading、writing and communication skills to understand Head Office’s policies ,write report to Head Office and communicate with Head Office colleagues.
• Relevant certifications in IT Governance, risk management, or compliance are advantageous is a plus.
• Proven ability to work collaboratively with cross-functional teams to address challenges and implement practical solutions for IT risk and compliance management.
• Strong self-initiative and self-study spirit.