Third-Party Risk & Trust Center Analyst

Relx Plc; Manila; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Elsevier Manila is hiring a Security Analyst to support third‑party risk management and the Trust Center. You will assess vendors for security and privacy controls, respond to customer security questionnaires, and coordinate with legal, product, and security teams to ensure due diligence.

You will maintain Trust Center content, handle inquiries, and contribute to audit readiness while collaborating across global teams to strengthen security governance.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 2–3 years of experience in information security compliance, third-party/vendor risk management, or IT audit.
• Experience assessing vendors against security and privacy control frameworks.
• Experience handling inquiries from customer security questionnaires and maintaining a trust center.
• Fluency in English required.
• Certifications such as CISSP, CISA, CISM, Security+, or ISO 27001 Lead Auditor/Implementer preferred.

Responsibilities

• Assess third parties and vendors for compliance with contractual, security, and regulatory requirements.
• Maintain and publish Trust Center content; respond to security questionnaires (SIG, CAIQ, RFP/RFI).
• Support audits and answer stakeholder inquiries; partner with sales, legal, product, and security.
• Strengthen relationships with Legal, Procurement, Privacy, and Product teams; promote process improvements.
• Monitor metrics, KPIs, and reporting on third‑party risk posture.

Skills

InfoSec knowledge

GRC/TPRM experience

Audit experience

Communication skills

Cross-functional collab

Education

Bachelor’s degree in Information Security

Bachelor’s degree in Computer Science

Tools

OneTrust

SafeBase

AuditBoard / similar

Job description

Elsevier Manila is hiring a Security Analyst to support third‑party risk management and the Trust Center. You will assess vendors for security and privacy controls, respond to customer security questionnaires, and coordinate with legal, product, and security teams to ensure due diligence.

You will maintain Trust Center content, handle inquiries, and contribute to audit readiness while collaborating across global teams to strengthen security governance.