IT Security grc analystConnectOS

Job Description
Why Join Us
Are you looking for a role that provides opportunities to develop and grow Take the next step in your career journey with us! We'll provide you with a professional support structure and benefits to ensure you can thrive.
We offer Premium HMO, awesome technology, and above-market remuneration. Our high performers are frequently invited to visit their colleagues internationally for professional development.
We're always searching for great talent to join our team. If you'd like be part of a fast-growing industry leader with an exceptional company culture, we'd love to hear from you.
Job Summary:
The primary objective of this position is to support the Security Risk and Compliance function within the organization by completing quality reviews for IT resources and assessment tools that are developed by the company and external partners. Perform monitoring of IT general controls at the application, database, operating system, and process levels. Work with business partners to ensure process documentation is accurate. Ensure controls knowledge transfers and program communications are complete, timely, maintained and update the IT General Controls master list. Coordinate with control owners to ensure that active management, monitoring and testing of the IT General Controls occurs throughout the year. Assist with internal/external auditing, controls training, and maintain a close partnership with SOX stakeholders.
Key Responsibilities & Requirements:
Develop and maintain security policies, standards, procedures, guidelines and process documentation
Perform necessary risk assessments and work with business units to develop a best way manage them
Own and maintain security risk register
Participate in compliance audits both internal and external
Performing control testing aligned to JBS IT General Controls in relation to Technology and SOX requirements
Effective delivery of assurance activities for various controls like User access review
Provide advice and collaborate with departmental projects in relation to best security practices
Implement and maintain the methods through which these metrics are informed, via data extraction and analysis
Work with the business and application technical owners to map business processes, perform fit gap analysis and document requirements
Provide ongoing support to all functions of the security, risk and compliance team as required
Work with IT organization to remediate non-compliant conditions in a timely manner
Participate SOX IT projects to ensure new system implementation meet SOX control requirement
Support the Technology team in additional activities (as might be identified) such as creation and submission of purchase orders, etc.
Requirements
Appropriate tertiary education, such as Computer Engineering, Computer Science, Information Technology, Business, Engineering, or similar
At least 8 years of solid experience working in an IT organisation focusing on Governance and Security compliance activities. You will possess the following skills as a result of your experience
Experience working in SOX program environment or similar auditing framework program
Degree and/or extensive relevant experience in an appropriate technical area with specific focus on one or more of the key accountabilities (i.e. policy formation, legislative research, risk management etc.). preferably in the context of a recognised framework
Prior experience with technical writing is highly preferred
Experience using MS Office tools such as Visio
Well-developed verbal and written communication and interpersonal skills including strong skills in data collection, analysis and interpretation, strong planning and organizational skills - able to withstand pressure and tight deadlines; prioritise and organize workloads
Passionate about upskilling and being able to cross-knowledge within a multi-functional team
The successful candidate will be a good collaborator with demonstrable experience in negotiating outcomes with colleagues and other teams where the outcome impacts areas outside own area of control.
Demonstrated organizational and time coordination skills, excellent attention to detail, self-driven, results-orientated with a positive outlook, a clear focus on high quality and efficient marketing activity
Creating and maintaining monitoring plans and schedules
Providing clear, concise information to support the creation of senior management reports
Exposure to standard business practice/ IT audits, controls, compliance
Experience in FMCG, manufacturing and / or supply chain environment will be highly regarded.
Must be amendable for hybrid work setup. Early morning Shift (AU Time zone). Physical Office: The Mega Tower, Mandaluyong City
Benefits
Standard Job Benefits:
HMO
Paid Time-Off
Quarterly Sick-Leave conversion
Paid Government-Mandated Benefits
Equipment provided
Standard Job Highlights
Career growth and development opportunities
Stable organization and industry leader
Collaborative and fruitful company culture