Senior Cybersecurity Strategy & Compliance Consultant

EY; Makati; On-site; PHP 900,000 - 1,400,000; Full time

Benefits offered by this job

Developing an extraordinary you

Empowering an extraordinary you

Fueling an extraordinary you

Job summary

SGV is seeking a Senior Associate in Strategy, Risk and Compliance to lead cyber transformation engagements and security program improvements for clients in the Philippines. You will assess current controls, design roadmaps, and steer risk and compliance activities across multiple projects.

The role emphasizes governance, reporting, and collaboration with client teams, while developing your leadership and technical skills in a flexible, inclusive environment.

Qualifications

• Five years of relevant experience in cybersecurity, risk management, compliance management, or internal audit with hands-on experience in auditing, testing, assessing, designing, or implementing cybersecurity frameworks or regulations.
• Strong understanding of security practices and frameworks including ISO 27001, PCI DSS, NIST, COBIT, and related controls.
• Willingness to pursue cybersecurity certifications and external training.

Responsibilities

• Execute cybersecurity strategy, risk, and compliance projects with defined approaches and methodology.
• Conduct cyber transformation engagements to enhance security postures and maturity assessments.
• Design security roadmaps and perform security assessments of applications, vendors, or infrastructure.
• Evaluate client compliance against standards such as ISO 27001, PCI DSS, HIPAA, NIST, and other regulations.
• Develop policies, standards, and standard operating procedures.
• Conduct information risk assessments and propose effective mitigations.
• Design cybersecurity dashboards for governance and reporting.
• Provide guidance, coordinate and support teammates on projects.
• Guide and review peers and junior team members with feedback.
• Prepare client reports, documents, and delivery schedules.
• Conduct research to add value and insights for clients.
• Contribute ideas to improve project outputs and outcomes.
• Assist with performance reviews and staff development.
• Build positive relationships with client personnel and management.
• Facilitate training and certification opportunities for the team.

Skills

Five years cybersec experience

Security frameworks knowledge

Strong communication skills

Education

Bachelor’s degree in IT / CS / eng / management / business

Tools

GRC technologies

Job description

SGV is seeking a Senior Associate in Strategy, Risk and Compliance to lead cyber transformation engagements and security program improvements for clients in the Philippines. You will assess current controls, design roadmaps, and steer risk and compliance activities across multiple projects.

The role emphasizes governance, reporting, and collaboration with client teams, while developing your leadership and technical skills in a flexible, inclusive environment.