Third-Party Risk & Trust Center Security Analyst

Hammerjack Pty Ltd; Philippines; On-site; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

Country-specific benefits

Job summary

Elsevier is seeking a risk and security professional to assess third-party vendors globally, manage data flows, and ensure regulatory compliance. You will collaborate with Legal, Procurement, Privacy, and Product teams to maintain risk records and respond to security questionnaires.

The role emphasizes governance, process improvement, and timely remediation within a cross-functional, global team. Fluency in English and strong communication are essential.

Qualifications

• Bachelor's degree in information security or related field.
• 2–3 years of experience in information security compliance, third-party/vendor risk management, or IT audit.
• Fluency in English required.

Responsibilities

• Assess third parties and vendors globally for compliance with contracts, security requirements, and regulatory obligations.
• Gather information for each engagement: engagement type, data in scope, data flows, connectivity, and data use; evaluate impact to security objectives.
• Raise information requests when responses are incomplete and maintain records in a GRC/TPRM platform (e.g., OneTrust).
• Identify gaps or conflicts in existing processes and drive remediation of control deficiencies identified during assessments.
• Monitor assessment timelines, vendor record expiry dates, and reassessment cadences to keep the third-party risk register current.
• Assess potential business changes for impact to third-party compliance obligations.

Skills

Security governance

GRC/TPRM tooling

Data flow diagrams

Vendor risk management

Auditing & controls

Communication skills

Education

Bachelor's degree in Information Security or related field

Tools

OneTrust

SafeBase

AuditBoard

Job description

Elsevier is seeking a risk and security professional to assess third-party vendors globally, manage data flows, and ensure regulatory compliance. You will collaborate with Legal, Procurement, Privacy, and Product teams to maintain risk records and respond to security questionnaires.

The role emphasizes governance, process improvement, and timely remediation within a cross-functional, global team. Fluency in English and strong communication are essential.