IT Controls Analyst

Total Number of Openings

5Develop and maintain the cybersecurity strategy, policies and risk management processes to ensure that the organization effectively secures Chevron's operations.

About Us

Chevron is a leading multinational energy company with operations in over 180 countries. Founded in 1879, Chevron has a rich history of innovation and growth, making significant contributions to the global energy landscape.

Chevron markets Caltex fuels, lubricants and other petroleum products in the Philippines. Our network of service stations, terminals and sales offices forms the backbone of our presence in the Philippines.

Chevron supports its operations in the Philippines and worldwide through two subsidiaries: Chevron Philippines Incorporated (CPI), which manages downstream operations and markets Caltex brand fuels, lubricants and petroleum products, and Chevron Holdings Incorporated (CHI), a global business services organization. Established in 1998, CHI provides business support services in finance and accounting, information technology, supply chain management, human resources, customer service and marketing. It serves Chevron affiliates around the world and has grown to be one of the leading global business services organizations in the Philippines. The company has received various recognition as one of the country's top employers and as a champion of diversity and inclusion in the workplace. 

At Chevron, we believe humanity can solve any challenge – including meeting the world's energy needs of today, while advancing a cleaner energy tomorrow.

About the Role

We have an exciting opportunity for an IT Controls Analyst. This role will be based in 6750 Building, Makati City.

The IT Controls Analyst position is responsible for assessing risks, analyzing cyber threats, and assisting in preventing cyber-attacks before they occur. They provide guidance on tools to measure and manage risk, identify/mitigate threats, and protect against unauthorized disclosure of confidential information. Risk Analysts duties include assessing the adequacy of security strategies, adherence to security guardrails and calculating the impact of adverse events or threats. Ideal candidates will assist in ensuring effective execution of cybersecurity strategies and our risk management framework by managing relationships with key stakeholders, verifying that IT risks are appropriately mitigated, as well as providing periodic updates on the state of compliance.

Responsibilities include, but are not limited to, the following:

• Advises leadership on cybersecurity initiatives that supports the latest trends in IT & OT security, risk, and controls.

• Maintains cybersecurity documentation including Business Continuity and Disaster Recovery Plans

• Facilitate risk assessment exercises, perform compliance and risk monitoring/validation, and other compliance assurance exercises as required.

• Leads awareness and training for the information technology risk program elements to ensure responsibilities are understood and executed.

• Coordinates external and internal assurance or advisory audits, representing information technology throughout the lifecycle of the audit (from planning through remediation strategy).

• Monitors, tracks, and reports mitigation and resolution of IT risks.

• Facilitates compliance of all equipment utilized in the Process Control Network (PCN)/Operational Technology (OT) and Demilitarized Zone (DMZ), including timely remediation of critical vulnerabilities.

• Supports and integrates IT standards into the PCN environment.

• Serves as site representative for internal and external cyber initiatives.

• Serves as Process Advisor for the Operations Technology Incident Response Process (OTIRP)

• Works closely with other technical, incident management, and forensic personnel to develop a broader understanding of the intent, objectives, and activities of cyber threat actors and supports the cyber defense program.

Chevron participates in E-Verify in certain locations as required by law.

---