Compliance Consulting Analyst

Manage and support information systems and security implementation and audits in accordance to set objectives. Continuously develop and enhance information systems and security knowledge and skills through participation in upskilling activities, training and awareness initiatives appropriate to the position.

• Manage internal and external audit and consultation projects delegated by the Compliance Consulting Manager or Compliance Service Head and contribute to the attainment of set goals and established key metrics through effective project plan implementation.
• Demonstrate the Compliance Consultant role and subject matter expertise by providing relevant, industry-recognized best practices, standards and regulatory recommendations and advisories for both internal and external communications.
• Enhance information security knowledge and skills through continued learning and participate in credential-building activities to gain the prescribed certifications. Facilitate group-initiated activities that promote soft skills development required for the role.
• Conduct information systems audit/assessment and prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
• Assist top management in developing its respective management system as required by certification standards such as ISO 27001, ISO 22301, ISO 27701, etc.
• Lead the development and control of management documentation such as policies, guidelines, and procedures as necessary.
• Establish and maintain the organization's Risk Management methodology based on the context of the organization.
• Conduct the internal audit program as facilitated by the internal audit team and provide assistance to the organization on preparation for external audits, during the audit, and post-audit activities.
• Maintain and enhance the organization's management systems programs through the development of awareness initiatives and monitoring of metrics based on objectives.
• Lead in the conduct of quality checks through periodic sampling and random checking for quality of tickets, reports and calls.
• Support performance monitoring of the team through proactive feedback.

• Minimum Education: Bachelor's Degree of any Information Technology, Accounting or Engineering-related studies
• Minimum Experience/Training: Has experience in project and/or program management
• Certifications related to Information Security (CISA, CEH, CCNA, CCNP, etc) is an advantage
• Certifications related to standards and framework such as ISO 27001, ISO 22301, ISO 27701, ISO , PCI-DSS, COBIT and ITIL is beneficial.
• Competency: Must have good communication and presentation skills
• Must be assertive, confident, has critical thinking and good decision-making capabilities
• Knowledge of computer networking concepts and protocols, and network security methodologies
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
• Knowledge of cybersecurity threats and vulnerabilities
• Knowledge of industry-standard and organizationally accepted analysis principles and methods
• Knowledge of Risk Management Framework (RMF) requirements
• Knowledge of organizational process improvement concepts and process maturity models (e.g., CMMI for Development, CMMI for Services, and CMMI for Acquisitions)
• Knowledge of service management concepts for networks and related standards (e.g., ITIL)
• Ability to understand technology, management, and leadership issues related to organization processes and problem solving
• Ability to work across departments and business units to implement organization's privacy principles and programs and align privacy objectives with security objectives
• Strong time management skills to handle multiple tasks or projects and deliver outputs within agreed timelines

• Regular working hours
• Hybrid work set up
• Main office is in Makati City; travel to client's offices for onsite activities may be required