Third-Party Risk & Trust Center Analyst

RELX; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive benefits

Job summary

RELX in Manila is seeking a Third-Party Risk Manager to assess vendors globally for compliance with contractual and regulatory obligations. You will gather information on engagement type, data in scope, data flows, connectivity to internal networks, and intended data use; and evaluate impact to security objectives.

You will maintain assessment records in a GRC/TPRM platform, raise information requests, and drive remediation of control deficiencies while monitoring timelines and reassessment

Qualifications

• Bachelor’s degree in information security, CS or related field.
• 2–3 years in information security compliance or risk management.
• Experience with security/privacy control frameworks and trust centers.

Responsibilities

• Assess third parties and vendors for compliance with contractual, security, and regulatory obligations.
• Gather data on engagement type, data in scope, data flows, networks, and data use; evaluate impact to security objectives.
• Raise information requests and maintain records in GRC/TPRM platforms.
• Identify gaps, drive remediation, and monitor timelines and cadences.
• Collaborate with Legal, Procurement, Privacy, and Product teams; report on risk posture.

Skills

Security controls

GRC/TPRM

Data privacy

Communication

Cross-functional collab

Education

Bachelor's degree in Information Security or CS

Tools

OneTrust

SafeBase

Optro

Job description

RELX in Manila is seeking a Third-Party Risk Manager to assess vendors globally for compliance with contractual and regulatory obligations. You will gather information on engagement type, data in scope, data flows, connectivity to internal networks, and intended data use; and evaluate impact to security objectives.

You will maintain assessment records in a GRC/TPRM platform, raise information requests, and drive remediation of control deficiencies while monitoring timelines and reassessment