Third-Party Risk & Trust Center Analyst

RELX; Manila; In loco; PHP 700.000 - 1.100.000; Tempo pieno

Descrizione del lavoro

Elsevier is seeking a governance and risk professional to assess third-party vendors globally, ensuring compliance with contracts, security requirements, and regulatory obligations. You will gather data on engagements, data flows, and connectivity to internal networks, then evaluate impact on security objectives.

You'll maintain assessment records in a GRC/TPRM platform, raise information requests, remediate control gaps, and support audits.

Competenze

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 2–3 years of experience in information security compliance, third-party/vendor risk management, or IT audit.
• Experience assessing vendors against security and privacy control frameworks.
• Experience handling inquiries from customer security questionnaires and maintaining a trust center.
• Fluency in English required.
• Preferred certifications: CISSP, CISA, CISM, Security+, or ISO 27001 Lead Auditor/Implementer.

Mansioni

• Assess third parties and vendors globally for compliance with contracts, security requirements, industry best practices, and regulatory obligations.
• Gather all relevant information for each engagement: type of engagement, data in scope, data flows, connectivity to internal networks, and intended data use; and evaluate impact to security objectives.
• Raise information requests where vendor or business responses are incomplete, and maintain accurate, comprehensive assessment records in an online GRC/TPRM platform (e.g., OneTrust).
• Proactively identify gaps or conflicts in existing processes and drive remediation of control deficiencies identified during assessments.
• Monitor assessment timelines, vendor record expiry dates, and reassessment cadences to keep the third-party risk register current.
• Assess potential business changes (new engagements, scope changes, offboarding) for impact to third-party compliance obligations.

Conoscenze

InfoSec risk experience

Security domain knowledge

GRC/TPRM tooling

Data flow interpretation

Communication skills

Global cross-functional teamwork

Formazione

Bachelor’s degree in Information Security or CS

Strumenti

OneTrust

SafeBase

AuditBoard/Optro

Descrizione del lavoro

Elsevier is seeking a governance and risk professional to assess third-party vendors globally, ensuring compliance with contracts, security requirements, and regulatory obligations. You will gather data on engagements, data flows, and connectivity to internal networks, then evaluate impact on security objectives.

You'll maintain assessment records in a GRC/TPRM platform, raise information requests, remediate control gaps, and support audits.