Information Security controls & compliance managerEclaro

Assignment Detail Industry: IT Consulting/Services Job Description Information Security Controls & Compliance Manager Overview The Information Security Controls & Compliance Manager will collaborate with Eclaro North America and Philippines IT Assignment Detail Industry: IT Consulting/Services Job Description Information Security Controls & Compliance Manager Overview The Information Security Controls & Compliance Manager will collaborate with Eclaro North America and Philippines IT, IS and business entities to create, manage, and administer the company's Information Security/Risk Management controls framework, policies, standards, processes, procedures, and tools that apply to all technologies, processes, and systems used by all company business functions. The Manager will assess risk across Eclaro's Philippines entity on a regular basis and seek to identify and promote opportunities to reduce risk while helping the company stay in compliance with applicable policy and regulatory guidelines and/or mandates. Responsibilities Perform information security risk assessments, IT controls audits, and compliance assessments to identify weaknesses and risks that jeopardize the safety, security, or compliance posture of internal and client-facing systems and information resources Manage Eclaro's external audit activities and associated maintenance. Coordinate internal Eclaro resources (human, technical, documentation) and external audit resources (i.e. audit and/or client resources) to ensure compliance with its relevant ISO, SOC 2 and any other relevant audit certifications/requirements Identify and promote opportunities to reduce risk while helping Eclaro stay in compliance with its relevant ISO, SOC 2 and any other relevant audit certifications/requirements Administer compliance frameworks and associated tools necessary to generate compliance reports and audit artifacts Help system owners and business stakeholders to reduce information security risks and achieve required compliance positions through systematic application of risk mitigation controls, compensation activities, and remediation efforts Provide structured risk and compliance reporting to senior/executive leadership at team, department, country, and company-wide levels as applicable. Develop and maintain relationships with the relevant and key risk, compliance, IT, IS and business stakeholders. Develop and maintain policies, procedures, standards, and other documentation related to risk management, IT controls, information security and compliance. Participate in the IS Controls and Compliance subordinate team member's recruiting, interviewing, hiring and onboarding activities as needed Participate in all IS Controls and Compliance department regularization, promotion and termination activities along with HR and relevant company stakeholders (as needed) Recommend improvements to the IS Controls and Compliance team's daily operational processes, organizational structure, etc. to maximize the teams productivity and quality of deliverables Ensure IS Controls and Compliance team's adherence to all department and company policies, procedures, code of conduct, etc. Perform any other tasks as assigned Qualifications/Skills Bachelor's degree from an accredited college or university is required 5+ years in a risk management and/or compliance leadership/management role is required 8+ years in a relevant IT and/or IS role is desired Demonstrated experience with ITIL, COBIT, ISO, SOC, Sarbanes Oxley, NIST, HITRUST and other common governance and/or audit frameworks and methodologies CISA, CISM, CGEIT, CRISC, CISSP, or similar industry certification is desired Strong critical thinking and problem-solving skills Strong data analytical skills Strong verbal and written communication skills (English) Strong presentation skills (internal and client-facing) Strong work ethic and ability to work in a high-volume, fast-paced, high-pressure environment Positive and upbeat personality/demeanor Collaborative and motivational management/leadership style
Monster

Philippines
Permanent
Full-time