IT.Security Analyst

About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

Position:              IT Security –IT Security Analyst (Governance)

Location:             Makati, Philippines

Your Role

1. IT Security is responsible for contributing to Citco’s Information Security Management System and program. As part of IT Security, you will be responsible for performing IT Security governance, risk and compliance projects with the following principal accountabilities outlined below. 

• Report directly to the IT Security Governance, Risk, and Compliance (GRC) Department Manager. Cultivate and maintain excellent relationships with management and staff within the organization, internal and external auditors and security colleagues.

• Interact with client/internal board members on status of ISMS and IT Security program presentations 

• Create and manage global, ethical phishing email scenarios through a third party and produce monthly phishing test reports.

• Respond to client due diligence questionnaires and requests

• Collect information and produce quarterly management reports for internal and external distribution

• Create and manage monthly IT Security newsletter releases

• Assist with IT Security policy and standards review and updates

• Strong understanding of ISO27001 and COBIT frameworks and assist with maintaining compliance with these guidelines

• Strong understanding of risk management principles and processes

• Maintain Confluence for IT Security Governance team

• SharePoint site maintenance and construction

• Employ principles of usability to ensure communication is delivered in the right format for the audience, and test communication deliverables throughout the project lifecycle to validate against the requirements.

• Work directly with integration teams to communicate product information

• Create and manage annual IT Security Awareness training programs for global delivery.

• Provide support in preparation of IT Security GRC materials, documentation, and annual planning and strategy process.

• Assist with our security metrics program and other miscellaneous duties.

• Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures.

• Train other staff members and other stakeholders, as necessary.

About You

• You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus

• Have three or more years working in governance, risk and compliance role

• Requires two years technical writing experience with strong foundation on IT security and IT-related topics

• Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus

• Understanding of Basel II, SAS70, and SOC I & II requirements and other best practices a plus

• Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus

• Knowledge of HTML and web authoring tools/languages is a plus

• Experience with graphic manipulation software also helpful

• Detail oriented, thorough and very organized work ethic

• Confident personality with ability to communicate clearly and succinctly in English

• Demonstrate flexibility and adaptability in approach to work

• Ability to effectively manage multiple concurrent projects/tasks with high attention to detail.