Apply on Employer Site

Globe Telecom · 4 months ago

Fraud Risk Oversight - Cybersecurity Risk Manager

NCR - WCC

Full-time

Onsite

Senior Level

5+ years exp

G-Xchange Inc. is part of Globe Telecom, aiming to innovate in the FinTech industry by providing meaningful financial solutions. They are seeking a Cybersecurity Risk Manager to oversee IT risk management, compliance, and security risk identification in a complex technology environment.

InternetMobileTelecommunications

Comp. & Benefits

Qualification

IT risk managementCybersecurityIT complianceIT governanceData analyticsCOBITISO 27001AWS cloud securityProject managementChange managementBusiness continuity managementEthical hacking certificationCommunication skills

Required

Bachelor's degree in Computer Engineering/ Computer Science/ Information Systems or related field

Over 5 years work experience in IT risk management, compliance, audit or other relevant experience (e.g., IT Governance/ Information Security/ IT Compliance)

Experience with non-IT process reviews and/or integrated audits with data analytics application

Strong working knowledge on the following IT-related processes: a) IT General Controls; b) Cyber/ Information Security and Data Privacy; c) IT Operations; d) IT Governance and risk management process; e) Business Continuity Management; f) Systems Development Life Cycle; g) Change Management; h) IT Application Controls

Familiarity with IT control frameworks and standards such as COBIT, ITIL, NIST-CSF, and ISO 27001

Demonstrated success in identifying IT and security risks in complex technology environment and providing recommendations on controls/processes to mitigate the risks

Well-developed organization and project management skills with proven ability to effectively manage time, prioritize, and handle multiple concurrent tasks

Good written and verbal communication skills, ability to communicate from process owners to senior management

Preferred

With professional certification in IT audit, IT risk and governance, and information security (e.g. CRM/ISO 31000/CISA/ CISSP/ COBIT5/ ISO 27001 Lead Auditor/ CRISC)

Experience in performing reviews or audits of AWS cloud security- and operations-related services

Familiarity with CI/CD process and related tools

Familiarity with AWS Elastic Kubernetes Services and related integrations to AWS

Working knowledge of SOC1, SOC2 and/or data privacy reviews

Experience in development, integration, and application of data analytics in audit methodology

Ethical Hacking Certification