Regional Data Risk & Controls Analyst

EY; Taguig; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Continuous learning

Flexible working arrangements

Diverse and inclusive culture

Career development

Job summary

EY is seeking a Policy, Risk, and Control (PRC) Methodology Specialist to lead regional data protection control deployment in Taguig. You will translate global requirements into practical regional steps, coordinate with Information Security teams and business stakeholders, and drive remediation efforts to protect EY and client information assets.

The role requires strong risk management and communications skills, experience coordinating multiple activities, and the ability to work in a globally

Qualifications

• Demonstrated experience in Technology Risk Management, Information Security, Governance, Risk and Compliance, data protection or a related discipline.
• Degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• Working knowledge of recognised policy and control frameworks, such as ISO or COBIT.
• Strong English language skills, including writing, presentation, interpersonal and communication capabilities.
• Experience coordinating stakeholders, tracking remediation activity and supporting the implementation of risk or control initiatives.
• Ability to work effectively in a globally distributed team and engage stakeholders across different levels of the organisation.

Responsibilities

• Support the deployment, adaptation and operational management of data protection controls across the assigned area or region.
• Translate global requirements into practical regional implementation steps that reflect local business, regulatory and operational needs.
• Coordinate with Information Security teams, technology teams, product owners and business stakeholders to support implementation and resolve delivery issues.
• Support Dataguard and related data protection activities while remaining adaptable to the broader Data Risk Controls portfolio.
• Track implementation progress, remediation actions, risk mitigation plans, dependencies and key programme milestones.
• Support the identification, assessment, escalation and resolution of data protection risks and control issues.
• Maintain clear and accurate reporting on implementation status, risks, decisions and follow-up actions for regional and global stakeholders.
• Help ensure remediation activities are executed consistently and issues are progressed to appropriate owners.
• Act as a liaison between global programme teams and regional stakeholders for control deployment and adoption.
• Serve as a regional point of contact for implementation requirements, operational questions and stakeholder follow-up.
• Support communications, education and awareness activities that improve understanding and adoption of data protection requirements.
• Build effective working relationships across geographies and organisational boundaries.

Skills

Technology risk management

Information security

Governance, risk & compliance

Data protection

Stakeholder engagement

Effective communication

Education

Degree in Computer Science or Information Security

Tools

ISO/COBIT

Job description

EY is seeking a Policy, Risk, and Control (PRC) Methodology Specialist to lead regional data protection control deployment in Taguig. You will translate global requirements into practical regional steps, coordinate with Information Security teams and business stakeholders, and drive remediation efforts to protect EY and client information assets.

The role requires strong risk management and communications skills, experience coordinating multiple activities, and the ability to work in a globally