Senior IT Compliance & Security Controls Lead (APAC)

Marsh Philippines, Inc.; Pateros; Hybrid; PHP 5,653,000 - 8,166,000; Full time

Job summary

Marsh Philippines, Inc. is seeking an experienced IT Compliance and Security professional to join the regional IT Operations team.

The role is based in Kuala Lumpur with a hybrid schedule of three days in the office weekly. You will support vulnerability management, IT controls compliance and risk assessment across the Asia‑Pacific region, working with business teams and the CISO team to strengthen security posture and deliver critical metrics.

Qualifications

• 6+ years in IT compliance, controls, cybersecurity or related field.
• Strong project management and ability to prioritise workload with multiple stakeholders.
• Attention to detail with commitment to meeting SLAs and compliance.

Responsibilities

• Monitor and coordinate vulnerability management activities (DAST, SAST, pen tests, infra scans, SSL) and remediation tracking to meet SLAs.
• Monitor IT operational controls compliance including access reviews, service accounts, MFA rollout and password policy compliance.
• Support disaster recovery planning and execution, including DR plan reviews and database restore testing.
• Coordinate with vendors and stakeholders on security requirements, third‑party risk and incident response findings.
• Prepare weekly security metrics and monthly operating reports for regional leadership and the CISO team.

Skills

IT compliance

Security concepts

Project management

Stakeholder management

Vulnerability management

Security monitoring

Tools

SNYK

GitGuardian

Edgescan

Bitsight

DARE

Job description

Marsh Philippines, Inc. is seeking an experienced IT Compliance and Security professional to join the regional IT Operations team.

The role is based in Kuala Lumpur with a hybrid schedule of three days in the office weekly. You will support vulnerability management, IT controls compliance and risk assessment across the Asia‑Pacific region, working with business teams and the CISO team to strengthen security posture and deliver critical metrics.