Sports Trader

Job Description

Job Title: Third Party Security Analyst
Location: Sta. Rosa Laguna (Old National Highway Tagapo)
Employment Type: Full-Time

Join our Third Party Security (TPS) team and play a critical role in protecting organizational assets by identifying, assessing, and mitigating security risks associated with third-party vendors. You will be embedded at a supplier location, supporting business operations by conducting continuous security assessments and ensuring compliance with industry standards and regulations.

• Conduct regular reviews and assessments of physical and logical security controls at secured workspaces.
• Identify risks and vulnerabilities in the security infrastructure and ensure protection of sensitive customer information.
• Develop and execute test procedures to evaluate the effectiveness of security controls.
• Monitor event/security logs and user sessions for anomalies.
• Report findings to stakeholders and follow up on remediation and closure.
• Collaborate with leadership, suppliers, and business units to address security concerns.
• Establish and communicate cybersecurity standards, policies, procedures, and testing protocols.
• Investigate reported violations and potential security breaches.
• Provide technical and analytical support to resolve complex security issues.
• Drive the Supplier Information Security Program to assess and improve supplier security posture.

Minimum Requirements:

• Bachelor's degree or equivalent work experience.
• At least 4 years of experience in Physical Security, Information Security, Cybersecurity, or related fields.
• Minimum 3 years of experience in IT network security, risk management, vulnerability assessment, or security investigations.

Preferred Qualifications:

• Professional certifications such as Security+, CISSP, CISA, CISM, CFE, or CEH.
• Experience with frameworks like PCI DSS, ISO standards, ITIL, or COBIT.
• Background in ethical hacking, forensic investigations, and secure coding principles.
• Strong understanding of cybersecurity risk management and control standards.
• Experience in global operations, offshoring, or outsourcing environments.
• Proven ability to communicate with senior executives and technical teams.
• Participation in security conferences, forums, or technical publications is a plus.

You're a self-starter who thrives in dynamic environments. You understand the importance of information security and are passionate about protecting data and systems. You're analytical, detail-oriented, and confident in communicating complex security issues to diverse audiences.