Vendor Risk & Trust Center Analyst (Hybrid)

Hammerjack Pty Ltd; Philippines; Hybrid; PHP 700,000 - 900,000; Full time

Benefits offered by this job

HMO coverage starting Day 1 for you &

Retirement plan with company matching

Life & accident insurance starting Day

PTO 24 days + 6 days after year 5

IT equipment provided

Job summary

Elsevier is seeking a Third-Party & Trust Center Analyst in the Philippines. You will assess third-party risk, maintain the Trust Center, and respond to security questionnaires to support customer due diligence.

The role collaborates with Sales, Legal, Product, and Security teams to address regulatory requirements. Ideal candidates have 2–3 years in information security compliance and vendor risk, with hands-on experience in GRC tooling and privacy standards.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent experience.
• 2–3 years of information security compliance, third-party/vendor risk management, or IT audit experience.
• Knowledge of security/privacy frameworks (ISO 27001/27017, 27701/27018, HIPAA, PCI DSS, NIST 800-53).
• Experience with GRC/TPRM and trust center tooling (OneTrust, SafeBase, Optro).
• Ability to interpret data flow diagrams and assess data protection implications.

Responsibilities

• Assess third-party vendors globally for security, privacy, and regulatory compliance.
• Maintain and publish content in the Trust Center (certifications, policies, FAQs).
• Respond to security questionnaires (SIG, CAIQ, RFP/RFI) with cross-functional teams.
• Support audits and inquiries related to third-party risk and Trust Center materials.
• Engage with Legal, Procurement, Privacy, and Product teams to improve processes.

Skills

Information security

Vendor risk management

IT audit

GRC/TPRM tooling

ISO/NIST/privacy frameworks

Data flow analysis

Security questionnaires

Cross-functional communication

Education

Bachelor's degree in Information Security/CS

Tools

OneTrust

SafeBase

AuditBoard/ISO tools

Job description

Elsevier is seeking a Third-Party & Trust Center Analyst in the Philippines. You will assess third-party risk, maintain the Trust Center, and respond to security questionnaires to support customer due diligence.

The role collaborates with Sales, Legal, Product, and Security teams to address regulatory requirements. Ideal candidates have 2–3 years in information security compliance and vendor risk, with hands-on experience in GRC tooling and privacy standards.