iso - Compliance & incident management specialistiScale Solutions

Location : Makati (1229) -
Salary : Competitive
Type : Permanent
Main Industry :
Job ID : 106224059
Employer : iScale Solutions
Posted On : 09 December 2020 08/01/2021
-Point of contact to assist, advise and promote APAC region BUs for Data Privacy and Information Security Compliance, Incident Management related matters.
-Maintain, review and development of information security policies, standards, processes, procedures and guidelines in accordance with cybersecurity best practices
-Administer compliance through ongoing security reviews, audits and assessments, assist BU to conduct security risk assessment, business impact analysis and develop security risk treatment plan.
-Identify and report the infosec and privacy compliance risks of regional BUs' operation, and improve the professionalization and standardization of risk management; Produce accurate and timely audit reports for both regular scheduled audits and ad hoc audits when required.
-Continue to track and interpret international cloud computing, cybersecurity and other technical compliance-related regulatory policies and standards, discover possible risks in a timely manner, and put forward suggestions for implementation;
-Responsible for IT risk management and compliance system construction and promotion of continuous improvement, including mechanism establishment, risk assessment, regulatory compliance management, training and publicity, etc.;
-Support internal projects to address cybersecurity issues, compliance objectives, and regulatory based deliverables.
-Collaborate with stakeholders for risk management, mitigation and remediation measure.
-Develop security awareness training program to foster a secure culture, improve security awareness and compliance.
-Partner with internal and external audit teams, to manage and effect audits from a compliance & point-in-time perspective, to a risk-driven, continuous proactive compliance approach.
Requirements
-Degree/Diploma in Computer-related discipline, or equivalent work experience.
-3+ years of experience in IT Risk Management, Governance or Compliance with hands-on experience in specific domain, as a software development, network/system engineering or cloud infrastructure
-Understanding of control and risk management concepts including control testing, risk assessments, risk treatment and third party risk.
-Knowledge of risk management policies, methods, standards, processes, governance models, and both quantitative and qualitative risk analysis approaches.
-Knowledge of privacy and personal data protection laws and regulations such as GDPR and PDPA.
-Knowledge and understanding of security frameworks and methodologies for controls, compliance and auditing i.e. NIST 800-53 and cyber security framework, ISO 27001, ISO27701, PCI-DSS, OWASP, SSDLC
-At least one of the certifications is preferred, such as CISSP, CSSLP, COBIT, CISM/CISA/CRISC, certification in Data Protection is a plus.
-This is a remote position.
Tiptopjob

Makati City, Metro Manila
Permanent
Full-time