Strategic Third-Party Security Lead

John Clements Consultants, Inc.; Metro Manila; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

John Clements Consultants, Inc. is seeking an experienced IT Security professional to lead third-party risk management initiatives and support vendor risk assessments across global partners.

The role focuses on assessing, monitoring, and mitigating cybersecurity risks while ensuring policy compliance and industry standards. You will collaborate with internal stakeholders, produce risk reports, and contribute to the continuous improvement of risk management frameworks in a multinational

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field.
• Minimum of 5 years of Third-Party Risk Management experience, preferably in a multinational environment.
• Strong understanding of information security threats and risk management, networking fundamentals, incident response, access control, encryption, and MFA.

Responsibilities

• Conduct third-party security risk assessments and due diligence reviews.
• Evaluate vendor security controls and identify potential risks.
• Collaborate with internal stakeholders to address risk findings and remediation plans.
• Monitor ongoing vendor compliance and risk exposure.
• Support the development and enhancement of third-party risk management frameworks and processes.
• Prepare risk reports and recommendations for management.

Skills

Third-Party Risk Management

Information security

Networking basics

Incident response

MFA & encryption

Stakeholder management

Analytical thinking

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft 365 Security Suite

Privileged Access Management (PAM)

Vulnerability Management tools

Security monitoring tools

Job description

John Clements Consultants, Inc. is seeking an experienced IT Security professional to lead third-party risk management initiatives and support vendor risk assessments across global partners.

The role focuses on assessing, monitoring, and mitigating cybersecurity risks while ensuring policy compliance and industry standards. You will collaborate with internal stakeholders, produce risk reports, and contribute to the continuous improvement of risk management frameworks in a multinational