Risk Management and Compliance Analyst
- Pasig City, Metro Manila
- Permanent
- Full-time
- HMO coverage for you and your family
- Work flexibly with our hybrid working environment
- Yearly Kick Off Parties with major giveaways (like the car in 2023)
- Get recognized through our ‘Value Awards’
- Grow your career - yes, we love to promote internally
- Do meaningful work and collaborate with the best
- 900 promotions given each year
- 2,700+ leadership training courses
- Prioritizes the handling and investigation of information security incidents.
- Creates an incident report detailing the root cause of the information security incident and the corrective and preventive actions that must be applied to avoid the incident from recurring.
- Tracks and monitors the information security incidents and ensures the identified gaps are mitigated through timely follow-up and coordination with stakeholders.
- Facilitates the information security controls such as but not limited to Card Data Discovery Management and Access Reconciliation as assigned.
- ·Identify potential areas of vulnerability and risk; develop corrective action plans for resolution of problematic issues. Provide general guidance on how to avoid or deal with similar situations in the future and ensure the identified gaps/risks are remediated.
- Provide updates and reports regularly, and as directed or requested, to keep key interested parties and the senior management informed of the operation and progress of Information Risk Management and Internal Audit Programs.
- Plans and prepares the internal audit calendar, timelines and activities
- Publishes the internal audit report and coordinates the audit findings with relevant stakeholders.
- Performs other information security-related tasks as assigned.
- Assists in improving the process of the Compliance Department.
- Able to solve problems and work under minimal supervision.
- With the passion to make a change
- With excellent communication, listening, and organizational skills.
- Critical thinking and decision-making skills
- Experience working in a large fast-paced organizational environment
- Flexibility as regards shifting work schedule
- Preferably with strong knowledge of Information Security based on ISO 27001 and PCI-DSS
- Collaboration: Brilliant jerks can be brilliant elsewhere.
- Impact: Do, get it done, create impact.
- Passion: Be positive, bring passion and energy.
- Transparency: A transparent team can help each other.