Regional IT Compliance & Security Controls Specialist

Marsh Philippines, Inc.; Pateros; Hybrid; PHP 1,837,000 - 2,756,000; Full time

Benefits offered by this job

Professional development opportunities

Inclusive culture

Career opportunities and well-being

Job summary

Marsh Philippines, Inc. is seeking an experienced IT security professional to join our risk-focused Information Technology team.

The role is based in Kuala Lumpur, Malaysia and operates in a hybrid setup requiring at least three days in the office weekly. You will support regional IT operations, drive vulnerability management, IT controls compliance, risk assessment, and security metrics reporting to the CISO team across the Asia-Pacific region.

Qualifications

• Approximately 6+ years in IT compliance, controls, cybersecurity, or related fields.
• Strong project management and administrative skills.
• Ability to prioritise workload and manage multiple stakeholders.
• Experience with security tools and concepts.

Responsibilities

• Monitor and coordinate vulnerability management activities (DAST, SAST, pen tests, infrastructure scans, SSL certs and protocols) and support remediation tracking to meet SLAs.
• Monitor and manage IT operational controls compliance including user access reviews, service accounts, MFA rollout and password policy.
• Support disaster recovery planning and execution, including DR plan reviews and database restore testing.
• Coordinate with vendors and stakeholders on security requirements, third-party risk assessments, and incident response findings.
• Prepare weekly security metrics and monthly operating reports for regional leadership and the CISO team.

Tools

SNYK

GitGuardian

Edgescan

Bitsight

SIEM

IAM

MFA

Job description

Marsh Philippines, Inc. is seeking an experienced IT security professional to join our risk-focused Information Technology team.

The role is based in Kuala Lumpur, Malaysia and operates in a hybrid setup requiring at least three days in the office weekly. You will support regional IT operations, drive vulnerability management, IT controls compliance, risk assessment, and security metrics reporting to the CISO team across the Asia-Pacific region.