
security assurance and assessment officer
4 days ago
Here at Metrobank, we don't simply hire employees-we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach
Position Title: Security Assurance and Assessment Officer
Job Summary:
- Develop tactical plans and programs for the establishment and maintenance of the Bank's third party information security risk management framework and ensure alignment with the enterprise risk framework
- Performs third party security, system security and information asset based risk assessment. Analyze and review of complex bank processes, application system and network security implementation and third party relationships to identify potential risk including the determination of risk mitigation strategies
- Analysis and review of complex application system and network security implementation on the current production environments to identify potential risk including the determination of risk mitigation strategies
- Recommend strategies to control risks from inadequate protection of confidentiality, integrity and availability of the information assets, processing facilities and connected services
- Prepares tactical plans and/or programs in the conduct of information, third party and system security risk assessments
- Identify the Bank's critical assets, threats to these assets, vulnerabilities, and reviews adequacy of existing security controls to safeguard the confidentiality, integrity and availability of information
- Coordinate and assess the security performance of third-party vendors that collect, process, transmit, and store client data
- Performs threat modelling-based system security risk assessment for all IT systems and other IT assets, as applicable
- Analyze and assess the impact of changes in process, technical changes and systems enhancements and third party relationships.
- Reviews adequacy of existing security controls to safeguard the confidentiality, integrity and availability of information and information processing facilities to mitigate information security risk
- Formulates, recommends information security policies and procedures on physical, environmental and personnel security with respect to results of information security assessment activities
- Responsible for coordinating across all business units and stakeholders in gathering information in preparation to the conduct of information, third party and system security risk assessment
- Articulate security findings and risk remediation strategies through issuance of risk assessment report. Track and follow-up status of risk mitigation activities
- Ensures security risk register is maintained and kept updated including status of remediation activities
- Executes and monitors accomplishment of the risk assessment plans and programs
- Articulate security findings and risk remediation strategies through issuance of risk assessment report; writing comprehensive, concise and understandable to non-technical
- Tracking and follow up on status of mitigation activities
- Maintain and track library of records and documentation
- Investigation of applicable reported incidents related to information handling and data privacy
- Keep abreast of and apply information, IT and third party security trends and regulatory and compliance changes affecting the security of landscape, security best practices, threat landscape (emerging and existing) and apply them in daily work
- Review the work of other Security Quality and Assurance Risk Assessors; guides and mentors them
- Proactively works with the Department Head in implementing programs for the continuous improvement of the bank's information security plans and strategies
- Perform other information security risk management and compliance related duties and responsibilities as directed by the Department Head
- Bachelor's Degree
- Experienced in IT general controls and auditing, preferably strong background on system security risk assessments
- Can perform information security risk-based prioritization decisions, analyze business risk, and can articulate complex business/risk trade-off recommendations and decisions
- Experienced on project security technical review and risk assessment
- Analytical and risk identification skills to analyze a variety of information security -related risk situations and develop recommendations on the best course of action
- Should also be abreast with security best practices and knowledge of common and emerging security threats
- Professional Certification may include CISA, CISM, CRISK, PCI-DSS, ISO-27001 LA or equivalent is an advantage
Rank: Junior Officer
Unit: Financial and Control Sector / Information Security Division / Security Quality Assurance and Risk Assessment Department
Location: Metrobank Center, BGC, Taguig City
-
IT Security Risk Assessment Officer
6 days ago
Taguig, National Capital Region, Philippines Metrobank Full time ₱120,000 - ₱180,000 per yearBe #InGoodHands with MetrobankHere at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future...
-
Chief Information Security Officer
1 week ago
Taguig, National Capital Region, Philippines beBeeInformationSecurity Full time ₱1,500,000 - ₱3,127,500Job OverviewThe Senior Manager, Security Assurance is responsible for leading security assurance initiatives and driving compliance with various security frameworks to ensure data integrity.Leads and manages the Security Assurance programs, ensuring compliance with regulatory and internal standards.Overssees external audits and collaborates with auditors to...
-
Chief Security Compliance Officer
1 week ago
Taguig, National Capital Region, Philippines beBeeSecurity Full time ₱2,000,000 - ₱2,500,000Job Overview:This is a leadership role in our organization's security department. The successful candidate will oversee security assurance initiatives and ensure compliance with industry standards.Main Responsibilities:Develop and implement strategic plans to maintain the highest level of data integrityCoordinate external audits and work closely with...
-
Chief Information Security Officer
1 week ago
Taguig, National Capital Region, Philippines beBeeSecurity Full time ₱900,000 - ₱1,200,000Job Overview: The role of Senior Manager, Security Assurance entails leading security assurance initiatives and driving compliance with various security frameworks to ensure data integrity.Key Responsibilities:Lead security assurance initiatives to drive business growth through strategic planning and executionDevelop and implement comprehensive security...
-
Offensive Security Officer
3 weeks ago
Taguig, National Capital Region, Philippines Metrobank Full timePress Tab to Move to Skip to Content LinkHere at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure...
-
Quality Assurance Professional
1 week ago
Taguig, National Capital Region, Philippines beBeeAuditor Full time A$120,000 - A$180,000About The RoleAs a Quality Assurance Auditor, you will lead daily vendor qualification operations within the QA team. This includes overseeing vendor selection, assessments, and qualifications, as well as coordinating with external auditors.You will contribute to broader QA activities, including delivering compliance advice, conducting internal and external...
-
Chief Cyber Risk Officer
1 week ago
Taguig, National Capital Region, Philippines beBeeCybersecurity Full time ₱1,800,000 - ₱2,500,000Senior Cybersecurity ManagerThe Senior Cybersecurity Manager will lead our cybersecurity initiatives and drive compliance with various frameworks to ensure the integrity of our data.This role is a key part of our organization's commitment to information security.Key ResponsibilitiesLead Security Assurance programs, ensuring compliance with regulatory...
-
Quality Assurance Officer
2 weeks ago
Taguig, National Capital Region, Philippines T.P. Food Processing Corp. Full time ₱104,000 - ₱130,878 per yearT.P. Food Processing Corporation is a homegrown Filipino company that started from a shared passion for everything COCOA Proudly making Filipino cocoa products from bean to chocolate since 1983, we are one of the few corporations selling cocoa products wholly produced in the country and in our own facilities. After having manufactured cocoa products for...
-
Chief Security Risk Officer
1 week ago
Taguig, National Capital Region, Philippines beBeeSecurity Full time $120,000 - $150,000Job Overview">The role of Security Risk Management Specialist is to lead the development and implementation of security risk management practices across the organization. This includes defining standards, playbooks, and procedures for identifying, assessing, and mitigating security risks.">Key Responsibilities:">">Develop and maintain security risk...
-
Quality Assurance Officer
2 weeks ago
Taguig, National Capital Region, Philippines t.p. food processing corporation Full time ₱60,000 - ₱80,000 per yearT.P. Food Processing Corporation is a homegrown Filipino company that started from a shared passion for everything COCOA Proudly making Filipino cocoa products from bean to chocolate since 1983, we are one of the few corporations selling cocoa products wholly produced in the country and in our own facilities. After having manufactured cocoa products for...