Manager, Information Risk Assurance and Automated Control Testing
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
By continuing, you agree to our Terms & Privacy Policy.
CLIENT PROFILE: A global financial services leader driving innovation, integrity, and resilience across insurance, wealth, and asset management.
Work Location: Diliman, Quezon City
Work Setup: Hybrid(3 days onsite, 2 days WFH)
Work Schedule: Flexible - mid or night shift
Are you ready to take the next step in your technology risk and cybersecurity career?
Join a forward-thinking organisation that’s committed to strengthening its information risk management capability through IT control assurance and continuous improvement.
This role offers the opportunity to work within a collaborative environment, supporting the design and execution of IT control testing and risk assessment activities across key technology domains.
About the Role
As the Manager, IRM Control Assurance Testing (iCAT), you will:
-
Assist in executing IT control testing activities across areas such as business continuity, incident management, third-party risk, IT asset management, and application security.
-
Evaluate the design and operating effectiveness of key IT and cybersecurity controls.
-
Collaborate with cross-functional stakeholders to collect data, validate control evidence, and support remediation efforts.
-
Help document findings, prepare insightful reports, and present results for senior review.
-
Contribute to the automation and improvement of control testing methodologies.
-
Stay current on emerging risks, regulatory trends, and cybersecurity technologies impacting information risk management.
About You
You’re detail-oriented, analytical, and passionate about information risk management. You enjoy working across teams, exploring control processes, and helping improve the organisation’s risk posture.
Required Qualifications:
-
2–4 years’ experience in information security, IT audit, technology risk, or related fields.
-
Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
-
Working knowledge of cybersecurity concepts, IT infrastructure, and risk management principles.
-
Strong analytical, problem-solving, and communication skills.
-
Ability to work collaboratively and manage multiple priorities effectively.
Preferred Qualifications:
-
Understanding of information security controls, IT governance, and cybersecurity tools (e.g., Splunk, Qualys, or similar).
-
Familiarity with risk and control frameworks such as NIST, ISO 27001, or COBIT.
-
Experience with data analysis or reporting tools.
-
Certifications such as CompTIA Security+, CEH, CISA, or CISM are advantageous but not essential.