Lead Analyst - Information Security (Risk Management & Audit)

Key skills
Bachelor's Degree
InfoSec
Data Privacy Agreements
Service Level Agreements, Contracts
Infosec Audits
ISO Certification

JOB TITLE: Lead Analyst - Information Security
CAMPAIGN: Risk Management & Audit
LOCATION: Eastwood Quezon City
WORK SET UP: Onsite, shifting
SALARY: Php 140,000 - Php 160,000

QUALIFICATIONS:

• Bachelor’s Degree preferred
• Well-versed in using infosec tools, technology
• Experience in dealing with Data Privacy Agreements, Contracts, Service Level Agreements
• Experience and role in Infosec Audits (ex. ISO 27001, HIPAA etc.)
• ISO Certification

JOB DESCRIPTION:

• Carry out all operational information security risk assessment.
• Carry out Privacy risk and impact assessment for client operations and technology infrastructure.
• Conducting operations audit based on Information security and privacy principles.
• Conducting review of contractual contracts, privacy contracts / exhibits / privacy agreements
• Ensure various information security, privacy regulatory requirements /client’s data privacy requirements are effectively addressed.
• Advise business unit leaders and risk management leaders in issues related to information security.
• Handling information security incidents, data breaches investigations
• Handling security exceptions and signoffs
• Assist Risk management functional leaders in overseeing compliance activities relating to information security.
• Creation and maintenance of risk assessment trackers and keeping them current.
• Creation and maintenance of up-to-date inventory of sensitive information profiling for client operations
• Ensure that contract arrangements are in place and being complied with. Obtain necessary evidence for the same. Conducting necessary due diligence on subcontractors / third party.
• Driving information security training and awareness to ensure employees are aware of their responsibilities.
• Experience on privacy regulations (GDPR, HIPAA/ HITECH, POPIA, PIPEDA, Australia/ New Zealand privacy laws APP etc.)