Vendor Risk & Trust Center Analyst

Reed Elsevier Philippines; Metro Manila; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Reed Elsevier Philippines is seeking a Third-Party & Trust Center Analyst reporting to the Manager of Cybersecurity.

You will assess the security, privacy, and compliance posture of third parties across the vendor lifecycle, while also owning and maintaining the company’s Trust Center: the centralized hub of security documentation, certifications, and due diligence materials used to build confidence with customers and prospects.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 2–3 years of experience in information security compliance, third-party/vendor risk management, or IT audit.
• Experience assessing vendors against security and privacy control frameworks and managing large control sets.
• Experience handling inquiries from customer security questionnaires and maintaining a trust center.
• Fluency in English required.
• Preferred CISSP, CISA, CISM, Security+, or ISO 27001 Lead Auditor/Implementer.

Responsibilities

• Assess third parties and vendors globally for compliance with contractual agreements, security requirements, industry best practices, and regulatory obligations.
• Gather information for each engagement (data in scope, data flows, connectivity) and evaluate impact to security objectives.
• Maintain assessment records in online GRC/TPRM platform (e.g., OneTrust).
• Identify gaps or conflicts and drive remediation of control deficiencies identified during assessments.
• Monitor timelines, vendor record expiry dates, and reassessment cadences.
• Support Trust Center content and customer due diligence requests.
• Serve as a trusted point of contact for customers and prospects seeking assurance on security and compliance posture.

Skills

Communication

Vendor risk management

Info security frameworks

Stakeholder collaboration

Data privacy concepts

Reporting & analytics

Education

Bachelor’s degree in Information Security or related field

Job description

Reed Elsevier Philippines is seeking a Third-Party & Trust Center Analyst reporting to the Manager of Cybersecurity.

You will assess the security, privacy, and compliance posture of third parties across the vendor lifecycle, while also owning and maintaining the company’s Trust Center: the centralized hub of security documentation, certifications, and due diligence materials used to build confidence with customers and prospects.