Security & AI Governance Analyst

ELMO; Manila; Hybrid; PHP 5,256,000 - 7,884,000; Full time

Benefits offered by this job

Hybrid work setup

Vacation and sick leave

Public holidays

Birthday leave and You-Day

13th-month pay

HMO from Day 1

Group life insurance

Work peripherals

Team meet-ups

Job summary

ELMO Software Pty Ltd is seeking a security professional to support ISMS and AI governance, risk, and compliance activities. You will maintain policies, records, and evidence, coordinate audits, and help with security operations.

Ideal candidate has 2–4 years in information security, knowledge of ISO 27001/NIST, and strong communication. Hybrid work setup with competitive benefits included.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 2–4 years in information security, governance, risk or compliance.
• Knowledge of ISO 27001, NIST, ISO/IEC 42001, ISO 9001 or similar.
• Understanding risk management and policy development.
• Experience supporting security policies, audits or assurance.

Responsibilities

• Support ISMS and AIMS operation and improvement.
• Maintain security policies, records, and evidence.
• Support customer security questionnaires and due-diligence requests.
• Assist audits, certifications, and tender responses.
• Support day-to-day security operations and risk tracking.
• Assist incident response, evidence gathering and remediation.
• Support AI governance records and supplier risk assessments.
• Prepare status updates for Head of Information Security.

Skills

ISMS

AIMS

Policy governance

Audit coordination

Risk management

Security incident handling

Documentation

Education

Bachelor’s degree in business administration, information technology, information security, security studies or related

Job description

ELMO Software Pty Ltd is seeking a security professional to support ISMS and AI governance, risk, and compliance activities. You will maintain policies, records, and evidence, coordinate audits, and help with security operations.

Ideal candidate has 2–4 years in information security, knowledge of ISO 27001/NIST, and strong communication. Hybrid work setup with competitive benefits included.