Senior IT Risk Analyst

Global Payments Inc.; Quezon City; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Global Payments Inc. in the Philippines invites a Senior IT Risk Analyst to join our Legal team and help shape governance for global commerce.

You will oversee IT risk assessments, manage risk registers, and collaborate with technology, security, and business stakeholders to drive proactive risk mitigation. The role emphasizes executive reporting, risk-based decision support, and adherence to regulatory guidelines.

Qualifications

• Bachelor's degree in a related field from an accredited university is required.
• Typically a minimum of 4 years of relevant experience.
• Strong technical skill set or aptitude in IT risk management.
• Excellent written and verbal communication; executive presentation skills.

Responsibilities

• Oversee IT risk assessments and manage risk registers across technology stacks.
• Collaborate with technology, cybersecurity, and business units; develop remediation action plans.
• Administer centralized IT risk repository and report to stakeholders within risk tolerance.
• Support executive risk reporting and governance presentations for decision-making.
• Adhere to risk policies and improve IT risk procedures and methodologies.
• Travel may be required.

Skills

Analytical skills

Communication skills

Presentation skills

Cross-functional collaboration

Risk management

Education

Bachelor's Degree

Master's Degree

Job description

Job Description:

Ready to take your career global?

Make your mark at one of the biggest names in payments. We're looking for a Senior IT Risk Analyst to join our ever evolving Legal team and help shape the future of global commerce.

What you'll own

• Collaborates effectively with team members to grow in their personal and professional development of IT risk management practices, with an emphasis on overseeing IT risk/issue management and performing IT risk assessments. Utilizes technical skills or aptitude to identify and address issues in various technology stacks, features, and/or components.
• Participates and consults in IT risk activities across the company. Assists in overseeing a variety of IT Risk related issues, including the identification, examination and analysis of IT applications, processes, and systems, and their overall impact to the organization. Participates in the creation of the IT risk assessment roadmap, outlining technology topics and areas of the company where quarterly risk assessment reviews are needed. In doing so, identifies gaps, potential emerging threats, potential financial exposure and client impact, and collaborates with stakeholders in their creation of remediation action plans.
• Enforces and administers an established and centralized risk management repository related to compliance, conformance and quantified key risks, within risk tolerance guidelines and with defined mitigation measures.
• Assists in developing and providing business unit, executive, and Board of Director IT risk reporting that meets regulatory requirements and assists internal risk-based decision making via governance presentations.
• Presents effective and efficient reporting updates on IT risk priorities and procedures. Monitors significant risks to ensure they are actively managed and reported.
• Recommends and helps implement improvements to IT risk procedures, practices, processes and methodologies to maintain a proactive, risk-based compliance oversight program.
• Adheres to operational risk policies and programs based on global regulatory guidelines, requirements and best practices related to technology industry standards. Assesses, monitors and verifies implementation of IT risk management processes.
• Not an exhaustive list; other duties as assigned; additional working hours when necessary; some travel

Participatesand helpssupportformaltechnology

andcybersecurityriskassessments,including thefollowing:

• Reviews technology and cybersecurity processes and controls against company policies, standards, and industry frameworks (e.g., NIST, PCI DSS, CIS) to identify gaps, assess risk, and recommend improvements;
• Prepares risk assessment materials (i.e. risk and control matrices, PowerPoint presentations, risk scoping,etc);
• Schedules and participates in virtual engagements and collaborates with technology and cybersecurity teams to determine risks and gaps with controls;
• Communicates technical risks to both technical and non-technical audiences;
• Analyzes risk assessment findings/makes observations/recommends improvements to ensure alignment with industry and corporate standards;
• Completes formal risk assessment summary materials (i.e. PowerPoint presentations, executive reporting,etc.); and,
• Reviews risk assessment summary with internal stakeholders to ensure understanding and alignment of next steps.)

What you'll bring

• Bachelor's Degree
• Relevant Experience or Degree in: related field of study from an accredited university is required; however, relevant experience in lieu of a degree may be considered.
• Typically a minimum of 4 years
• Related professional work experience
• Strong technical skill set or strong technical aptitude
• Assertive work ethic; demonstrates a passion for both the work and people - leading/developing others; strong multi-tasking skills; strong analytical skills; strong networking skills; strong communication skills, verbal and written; strong presentation skills for executive management and audit related engagements

t's a bonus if you have

• Master's Degree
• Related field of study from an accredited university.
• Prior Global Payments, payment or technology industry experience is preferred.
• Any preferred: PCI Professional (PCIP), Systems Security Certified Practitioner (SSCP), CISSP (Certified Information Systems Security Professional), AWS Cloud Practitioner, Certified in Risk and Information Systems Control (CRISC), Certified Information System Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT), GRC Professional (GRCP)

This is a good opportunity to bring in some of our values and behaviors:

• Think like a client: We care deeply about our clients' success. We ask, listen and learn - curious to understand first. Our passion drives excellence in everything we set out to do.
• Act like an owner: We take accountability - working at pace to own our outcomes. We empower each other to make decisions. We're innovative - always finding better ways to deliver impact.
• Win as one team: We value personal connections - moving forward together with clarity. We build inclusive and global teams - embracing different perspectives and ideas. It's always 'we', never 'me'. We're determined to succeed together.

About the team

Our inclusive and global teams win together every day. We're proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections

- It's unmatched. Come and be part of an ever-evolving company and get dynamic opportunities that go beyond borders.

What makes a Globalpayer?

Globalpayers think like a client, act like an owner and win as one team. We're curious and innovative - always finding better ways to deliver impact. We empower each other to make decisions, and it's our passion that drives excellence in everything we set out to do.

Does this sound like you? Then you sound like a Globalpayer.