About Citco
Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.
Position: IT Security –IT Security Analyst (Governance)
Location: Makati, Philippines
About You
You must possess at least a BS/BA Degree; Computer Science/Information Technology or equivalent is a plus
Have three or more years working in governance, risk and compliance role
Requires two years technical writing experience with strong foundation on IT security and IT-related topics
Working knowledge of Protiviti, SharePoint, JIRA and Confluence a plus
Understanding of Basel II, SAS70, and SOC I & II requirements and other best practices a plus
Certifications such as CISA, CRISC, CISSP, CISM, and other audit, risk and security-related certifications a plus
Knowledge of HTML and web authoring tools/languages is a plus
Experience with graphic manipulation software also helpful
Detail oriented, thorough and very organized work ethic
Confident personality with ability to communicate clearly and succinctly in English
Demonstrate flexibility and adaptability in approach to work
Ability to effectively manage multiple concurrent projects/tasks with high attention to detail.
Your Role
IT Security is responsible for contributing to Citco’s Information Security Management System and program. As part of IT Security, you will be responsible for performing IT Security governance, risk and compliance projects with the following principal accountabilities outlined below.
Show the full description
Report directly to the IT Security Governance, Risk, and Compliance (GRC) Department Manager. Cultivate and maintain excellent relationships with management and staff within the organization, internal and external auditors and security colleagues.
Interact with client/internal board members on status of ISMS and IT Security program presentations
Create and manage global, ethical phishing email scenarios through a third party and produce monthly phishing test reports.
Respond to client due diligence questionnaires and requests
Collect information and produce quarterly management reports for internal and external distribution
Create and manage monthly IT Security newsletter releases
Assist with IT Security policy and standards review and updates
Strong understanding of ISO27001 and COBIT frameworks and assist with maintaining compliance with these guidelines
Strong understanding of risk management principles and processes
Maintain Confluence for IT Security Governance team
SharePoint site maintenance and construction
Employ principles of usability to ensure communication is delivered in the right format for the audience, and test communication deliverables throughout the project lifecycle to validate against the requirements.
Work directly with integration teams to communicate product information
Create and manage annual IT Security Awareness training programs for global delivery.
Provide support in preparation of IT Security GRC materials, documentation, and annual planning and strategy process.
Assist with our security metrics program and other miscellaneous duties.
Maintain expertise on security trends through training, research and development in order to mitigate potential security exposures.
Train other staff members and other stakeholders, as necessary.
Our Benefits
Your well being is of paramount importance to us, and central to our success. We provide a range of benefits, training and education support, and flexible working arrangements to help you achieve success in your career while balancing personal needs. Ask us about specific benefits in your location.
We embrace diversity, prioritizing the hiring of people from diverse backgrounds. Our inclusive culture is a source of pride and strength, fostering innovation and mutual respect.
Citco welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection.
