Third-Party Risk & Trust Center Analyst

LexisNexis Risk Solutions; Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

RELX seeks a qualified information security professional to manage third-party risk assessments, maintain the Trust Center, and coordinate governance with Legal, Procurement, Privacy, and Product teams. The role supports audits, customer due diligence, and continuous improvement in risk posture.

The ideal candidate has 2–3 years in information security compliance and is fluent in English, with certifications such as CISSP/CISA/CISM or similar preferred.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 2–3 years of experience in information security compliance, third-party/vendor risk management, or IT audit.
• Experience handling inquiries from customer security questionnaires and maintaining a trust center.
• Fluency in English required; preferred CISSP, CISA, CISM, Security+, or ISO27001 Lead Auditor/Implementer.

Responsibilities

• Assess third-party risk and ensure compliance with contractual, security and regulatory obligations.
• Maintain and publish Trust Center content; respond to security questionnaires and inquiries.
• Engage with Legal, Procurement, Privacy and Product teams to drive process improvements and risk remediation.
• Support audits and leadership reporting on third-party risk posture and Trust Center engagement.

Skills

Information security

Risk management

Compliance

Security controls

Data privacy

Communication

Education

Bachelor's degree in Information Security or Computer Science

Tools

OneTrust

SafeBase

AuditBoard

Job description

RELX seeks a qualified information security professional to manage third-party risk assessments, maintain the Trust Center, and coordinate governance with Legal, Procurement, Privacy, and Product teams. The role supports audits, customer due diligence, and continuous improvement in risk posture.

The ideal candidate has 2–3 years in information security compliance and is fluent in English, with certifications such as CISSP/CISA/CISM or similar preferred.