Security Governance & Compliance Analyst: Drive Awareness & Risk

Indra Group; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Indra Group is seeking a Mid-Level Security Governance Analyst in the Philippines for an on-site role. You will design cybersecurity learning content, lead ISMS certification activities, and develop security policies and procedures.

The role emphasizes auditing, third-party risk management, and regulatory compliance, requiring 3–5 years of experience and strong analytical abilities. The role requires strong communication skills for engaging with stakeholders and delivering training to promote

Qualifications

• Bachelor's degree in a relevant field.
• Three to five years of relevant professional experience.
• Strong knowledge of security governance frameworks, ISO 27001, NIST CSF, COBIT, and CIS Controls.
• Excellent communication skills, with the ability to create and deliver clear cybersecurity awareness content and training.
• Ability to analyze contracts and assess cybersecurity risk implications.
• Proficiency in developing, reviewing, and implementing information security policies, standards, and procedures.
• Strong analytical and problem-solving skills, particularly in compliance gap analysis and audit findings remediation.
• Ability to engage and collaborate effectively with stakeholders across business units, IT teams, and senior leadership.

Responsibilities

• Design and deliver cybersecurity awareness content and training to promote user adoption of new capabilities.
• Lead ISMS certification activities and ensure alignment with global frameworks.
• Develop and release Information Security Policies, Standards, Guidelines, and Procedures.
• Conduct Information Security Compliance Audits and monitor compliance metrics.
• Assess security posture of third parties and manage related risks.
• Support incident response exercises and compliance management activities.

Education

Bachelor's degree in a relevant field

Job description

Indra Group is seeking a Mid-Level Security Governance Analyst in the Philippines for an on-site role. You will design cybersecurity learning content, lead ISMS certification activities, and develop security policies and procedures.

The role emphasizes auditing, third-party risk management, and regulatory compliance, requiring 3–5 years of experience and strong analytical abilities. The role requires strong communication skills for engaging with stakeholders and delivering training to promote