• Provide first-line support for network-related issues and escalate more complex issues to higher-level engineers.
• Assist in the installation, configuration, and maintenance of network hardware and software, including routers, switches, and firewalls.
• Monitor and troubleshoot network performance, including connection issues, bandwidth usage, and security vulnerabilities.
• Perform basic configuration tasks, such as setting up IP addresses, subnets, and VLANs.
• Maintain network documentation, including network diagrams, IP address lists, and configuration logs.
• Assist in testing and deploying new network solutions, hardware, and software.
• Respond to and resolve network service requests in a timely and efficient manner.
• Assist with network monitoring using tools to ensure performance and reliability.
• Provide end-user support for network connectivity issues and assist with basic troubleshooting.
• Perform software/firmware updates on network devices under the guidance of senior engineers.
• Follow standard operating procedures for network security, including VPN setup and password management.

• Bachelor's degree in computer science or engineering or any IT related courses
• Minimum 1 to 2 years of experience with Network and Security
• Ability to understand and successfully employ networking, storage, operating system virtualization, and integration solutions and services, and utilize appropriate environments (e.g. Test, Staging, and Production) in support of assigned responsibilities. 
• Ability to resolve technical problems and innovate more efficient use of IT resources. 
• Knowledge of AS400 is preferred. 
• With CCNA certification is a plus
• Can work a hybrid setup at Makati

The Legal Delivery Team is the engine room of DBC Philippines. Providing scalable, quality conveyancing support and services to buyers and sellers across the retail residential market, the Legal Delivery team works across all states in Australia and includes a large team of operational specialists in the Philippines.

Working as part of a team providing service and support to customers who are buying or selling a residential property in Australia by answering their queries, preparing the required documents and completing the generation of the contract draft you will be responsible for:

• Acting as the key customer contact for either the buyer or seller, providing guidance, updates and directions proactively and responsively
• Data entry and drafting the contract according to our standard procedure
• Reviewing, collating and preparing legal documentation with a high attention to detail within fixed external deadlines
• Partnering with Lawyers and other support teams in Australia to escalate complex queries and for final review of customers documentation
• Coordinating with external stakeholders such as banks, local councils or the other parties conveyancer
• Calculating fees, taxes and other financial assessments relevant to property settlement for review

• Provide general legal support to the business operations of the Company, in close collaboration with the global legal team and the business.
• Draft a broad range of customer contracts relevant to the industry and support templates regular reviews.
• Drive standardization and processes optimization.
• Perform analysis on customer contracts for management info and control. 
• Support developing and delivering awareness trainings.
• Maintain documents repository always up-to-date.

Your Career

The Major Account Manager is a significant driver of company revenue and growth. As an experienced and dynamic sales professional, you're responsible for leading and driving sales engagements. You're motivated by the desire to solve critical challenges facing our customer's secure environment, so you're prepared to connect them with a solution for every stage of threat prevention.

You'll be responsible for meeting and exceeding your quota by crafting and implementing strategic territory plans targeting deployments of the Palo Alto Networks Next Generation Security Platform. This is a unique opportunity for a closer with a go–getter mentality to win business and market share by actively displacing competing technologies. Oh, and did we say you love to sell? Because selling is what gets you out of bed every morning. This is not just a career - it's a meaningful challenge that impacts our lives in the digital age.

Our solutions are best–in–breed and customers need a trusted cybersecurity partner who can create a truly zero trust based security architecture. Our customers are looking to us to create critical transformations and our portfolio of solutions will help us do that.

Your Impact

• You will drive and orchestrate complex sales cycles and work with our internal partners and teams to best serve the customer
• Your consultative selling experience will identify business challenges and create solutions for prospects and our customers
• Understand the competitive landscape and customer needs so you can effectively position the portfolio of Palo Alto Networks solutions
• Create clear goals and complete accurate forecasting through developing a detailed territory plan
• Leverage prospect stories to create a compelling value proposition with insights into value for that specific account
• Stay updated on industry news and trends, and how they affect Palo Alto Networks products and services

The Avaloq Security team is an international team of analysts, senior and expert software engineers and architects. The Avaloq Security team develops and maintains central application security frameworks and tools for all companywide technology stacks and consults the business teams on best practice implementations for context specific security requirements. It furthermore operates the group-wide application security assessments, monitors the security vulnerabilities and supports the business teams in related risk mitigation plans.

Your key tasks 

• Analysis, design and development of requirements in collaboration with colleagues of Product Development, customers, business analysts and software partners
• Collaboration and contribution in projects across departments
• Check the daily automated build process for security warnings and provide support to resolve it
• Monitor third party library enrolment, update, and removal by using in-house tools and Whitesource
• Provide expert analysis on false positives findings, validate exploitability of detected vulnerabilities, and develop possible fixes
• Maintain data for configuration control of the release baseline.
• Coordinate security actions across multiple team to ensure the high quality of the Avaloq products
•  Prepare and distribute reports and documentation of security risks
• Conduct periodic reviews to ensure compliance with established security policies and procedures
• Participate in technical talks to internal members regarding security implementation, vulnerabilities, and opportunities for improvement

Accountable for Advertising (Offline and Display Banners):

• Ensure the development and successful implementation of advertising campaigns as per the commercial calendar and any other locally relevant opportunities in addition to the commercial calendar.
• Final approver for all country media plans and marketing communication work. • Work closely with other SO functions and Markets in the development of each launch/campaign.
• Secure that the overall advertising budget for the country is achieved and ensure appropriate evaluation to measure tangible metrics associated with budget and performance that delivers on marketing investments.
• Responsible for creative and media agencies country level briefing, relationship management, delivery and reporting. Understand the differences in channel mix to provide better brand engagement.

Accountable for (Commercial) Public Relations: 

• Lead the development of PR strategy that supports the overall communication strategy direction and oversee that all country PR actions (e.g. interviews, media launches, press conference, etc) are implemented successfully.
• Manage PR agency, their KPIs and deliverables. Secure brand leadership in media value and share of voice results in country PR.
• In situations where the IKEA brand is involved in negative media attention, assist the work done within IKEA in the country team to secure that all media coverage is managed to protect the IKEA brand and reputation.
• Support corporate communications in the execution of crisis plans in the country (including products that are of fault and might cause damage to customers, incidents where a product has caused damage to customers, etc.).

Accountable for a successful catalogue/brochure production & distribution:

• Oversee the development, execution and final completion of catalogue for the country, including surveys/research, mailing services, etc.
• Plan and ensure implementation of the country distribution strategy is completed successfully

Responsible for the development of Loyalty Communications and programme updates

• Manage the development of loyalty communications calendar/brief as a base, to develop communications materials for IKEA FAMILY and småles members.
• Ensure red thread with the communication platforms (e.g. Ads, Digital, etc.) in line with launch and campaign themes.
• Manage and ensure that IKEA FAMILY and Smales strategy are supported with communications that helps strengthen members’ affinity to the IKEA brand and drive further member engagement.
• Monitor the Loyalty programme is running smoothly for the country, e.g. systems fixes up to date, CRM system supports running business, merchandise and comms for Smales are attractive, etc.

Responsible for External Partner Collaborations and Loyalty Programme Partnerships:

• Lead, review and approve collaboration initiatives to include sponsorship and promotions (except those that overlaps into Sustainability department’s jurisdiction, such as donations and charities).
• Negotiate with partners for win-win collaboration for both commercial goals and for the purpose of enhancing the IKEA brand.
• Lead and liaise with relevant interval stakeholders such as the marketing team, Sales, Com-in, stores or sustainability if the collaboration involves them.

Responsible for other tasks including Market Intelligence coordination, Budgets, etc.

• Main co-ordinator of Market Intelligence research initiated by Systems on country level. Thereafter, to work closely with Local Marketing and Communications Manager to maximise opportunities at the PMA level as needed to externally communicate commercial offers and activities in the market.
• Responsible for accurate budgeting and monthly/annual tracking of expenditure, marketing theme booklet development and updates, post mortem reports, and priorities to the various commercial goals against visitor and sales targets and objectives.
• Working through SO functions, responsible for strategizing, coordination, creation, management and execution of the country commercial calendar.
• Secure consolidated post mortem documents from various agencies for campaigns and update on country marketing post mortem reports to commercial activities team.
• Work on other tasks and projects as assigned that will contribute to the development of IKEA retail operations (i.e. global, regional, country or local initiatives).

The Governance, Risk, and Compliance (GRC) team member will be reporting to the Head of Information Security and is responsible for supporting and enhancing the organization’s efforts to ensure adherence to policies, regulatory requirements, and industry security best practices. This role involves coordinating, executing, and overseeing various tasks related to governance, risk management, and compliance to protect the organization's assets, reputation, and ensure operational effectiveness.

The GRC specialist will work together with the Security Operations Leader, Security Operations Engineer, and QIMA internal stakeholders to meet the objectives of the audit requirements, identify risks present in the group, and to assess non-conformities and non-compliance against the organization’s Information Security Management System Policy and align the remediation plan with target dates against the respective owners.

The GRC specialist must have a good understanding of the different security and data privacy laws and regulations and industry security best practices with the ability to apply these standards to the QIMA environment.

Key Responsibilities:

1. Governance:
   • Develop, implement, and maintain policies, procedures, and frameworks to support QIMA’s organizational governance objectives.
   • Foster a culture of security, compliance and ethical behavior within the organization.
   • Conduct regular assessments and audits of governance processes to identify areas for improvement.
2. Risk Management:
   • Identify, assess, and prioritize risks for remediation that may impact the organization’s operations and overall security posture.
   • Develop risk mitigation strategies and monitor their effectiveness, until closure.
   • Maintain a risk register and ensure all risks are documented, evaluated, and tracked.
   • Collaborate with various departments to create and implement risk management plans.
3. Compliance:
   • Stay up to date with changing regulations and assess their impact on the organization.
   • Work with the Data Privacy Office and Legal teams to ensure the organization complies with all relevant laws, regulations, and standards.
   • Conduct regular internal reviews and identify non-conformities against QIMA’s Information Security Management System Policy that needs to be addressed.
   • Deploy regular security awareness to all employees and work with training team for security trainings and programs to be delivered to QIMA.
4. Documentation and Reporting:
   • Maintain accurate records of GRC activities, including policy documents, risk assessments, and compliance reports.
   • Prepare and present reports on governance, risk, and compliance activities to senior management and the board of directors.
   • Document incidents and breaches and manage remediation actions.
5. Collaboration and Communication:
   • Liaise with Security, IT, Compliance, Legal, HR, and other departments and stakeholders to ensure cohesive compliance and risk management efforts.
   • Act as a point of contact for regulatory bodies, auditors and client security requirements.
   • Provide guidance and support to all QIMA employees on GRC-related matters.

Your Team

We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center.

The role requires a strong background and understanding of all cyber security domains.

In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes.

Your mission

• Identify cyber security gaps in existing and proposed projects.
• Recommend Cyber Security changes or enhancements and drive implementation
• Manage and cultivate the defined security services and the relationship to our service providers
• Participate in organizational Security projects, as required
• Support in development processes, and procedures for the team
• Assist correlating alerts, implementing monitoring Use Cases
• Provide implementations, recommendations for protecting and resolving threats and incidents
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security
• Manage and support in major Cyber Security Incidents
• Support in 24/7 shifts rotation in the future
• Act as a technical Lead role model in the team on driving initiatives and projects

The key accountabilities are, but not limited to:

• Drafting and negotiating client / agency agreements, letter of intent, memorandum of understanding, NDAs etc.
• Dispute management and resolution
• Supervising external lawyers on litigation and company secretarial functions
• Corporate secretarial services
• Advising on compliance with advertising standards and regulations
• Advising on copy clearance and general clearance of advertising and promotion materials, social media campaigns and developing guidelines
• Advising on intellectual property rights (IPR), and protection of IPR
• Advising on agreements with artists, freelancers, photographers, animators and other third parties and carrying out negotiations with such third parties
• Reviewing and negotiating media buying agreements and other standard terms and conditions of business
• Advice in relation to licensing of third party information and data systems
• Reviewing and negotiating technology development and digital marketing agreements
• Advising on data protection compliance, data security and standard terms and conditions of website use
• Advising on third party license agreements and content contribution
• Updating all business departments on changes in the law which might impact business
• Advising on employment matters, employment disputes and non-voluntary terminations
• Formulating policies and processes to minimise company’s risk
• Updating of all commercial and employment templates
• Conducting out trainings
• Implementing and carrying out the group’s anti-corruption program
• Ad hoc projects as required

Job Description

In this Communications Manager role, your responsibilities would be focused on internal communications for the Legal Compliance Risk and Assurance area (LCRA) as well as administrative support tasks for the General Counsel. You will be working closely with the Head of Internal Communications and supporting with internal communications matters for the LCRA business area – such as town halls, newsletters, blogs - with the aim to translate LCRA updates into engaging messages for our global colleague audience and cascading company-wide messages for LCRA colleagues. The role also supports the General Counsel with the preparation of messaging and content for key meetings, in addition to the logistics and tracking of actions. As part of your work, you will also accompany internal projects of the LCRA team, perform administrative project activities and prepare the presentation of project results.

You would be part of the LCRA team based in Manila and aligned with the Internal Communications team led from Zurich.

Your key tasks 

• Support the General Counsel with regular communications within his business area
• Draft, review and edit communications in line with our style guide
• Ensure content is aligned with overarching business objectives
• Become a trusted advisor to the General Counsel on communication topics
• Create newsletter and email templates according to our brand guidelines
• Organize meetings and support with agenda creation, minute taking and action tracking
• Perform administrative project activities and prepare the presentation of project results
• Coordinate ongoing maintenance of the LCRA SharePoint site
• Provide guidance and support to the General Counsel to ensure company-wide change and engagement initiatives are landed successfully with LCRA colleagues

The Cyber Security Analyst will play a critical role in safeguarding the organisation's digital assets by monitoring, analysing, and responding to potential cyber threats and incidents. This position ensures the integration and alignment of operational and tactical security measures to support the organisation's strategic objectives. The analyst will collaborate with external security service providers to oversee the effectiveness of outsourced operations, and assist with some local IT support activities. Additionally, the role advises on security improvements, provides technical and security advice to other departments and the local office and maintains up-to-date knowledge of emerging cyber threats and technologies.

Your key tasks 

• Data Collection: Identify and gather relevant data from multiple internal and external sources, including logs, databases, APIs, and third-party security tools (e.g., Splunk, Tenable and others).
• Data Integration: Clean, process, and integrate data from disparate sources to ensure accuracy and consistency.
• Analysis and Interpretation: Perform exploratory data analysis to uncover patterns, trends, and anomalies in security data.
• Automation: Develop automated processes for data extraction, transformation, and loading (ETL) to improve efficiency and reduce manual effort.
• Dashboard and Report Creation: Design, build, and maintain interactive dashboards and reports using tools such as Apache Superset, Grafana, or similar platforms.
• Stakeholders Interaction: Collaborate with internal stakeholders to understand their security reporting needs and customize solutions to meet their requirements.
• Security Insights: Generate actionable insights and recommendations to improve clients' security measures based on data analysis.
• Collaboration: Work closely with engineers, architects, digital intelligence, and other stakeholders to ensure alignment and accuracy in reporting.
• Documentation: Maintain clear and comprehensive documentation of data sources, methodologies, and processes.

LOCATION: Cebu or anywhere in the Philippines

Key Responsibilities:  

• Monitor and manage day-to-day security alerts and incidents detected on QIMA anti-malware solutions. 

• Contain and remediate, escalated security incidents by working with IT support, IT Infrastructure, and/or Applications team. Document and implement changes to prevent potential recurrence. 

• Perform security event and network log analysis to identify other indicators of compromise across the QIMA environment.  

• Regularly review and develop strategies and procedures to handle security incidents ensuring that the QIMA incident response plan is up to date. 

• Maintain QIMA Business Continuity and Disaster Recovery Plans, and ensure that regular testing of plans are conducted based on agreed frequencies. 

• Perform regular security vulnerability assessment against QIMA applications and infrastructure. Document and report findings to the applicable teams (IT Infrastructure/Application Development Teams) to drive the completion on patching and remediation based on aligned SLAs. 

• Ensure compliance with legal and regulatory requirements, and internal and external audits related to information security. Assist in providing evidence to support QIMA’s compliance to any audit requirements. 

• Create and present regular reports on all deliverables stated to be presented to the Head of Information Security. 

We are looking for an organized and detail-oriented Associate Legal Assistant to join our team in Pasay City, Philippines. The successful candidate will play a key role in providing high-quality services to our business clients. The work will focus primarily on contract management operations, such as archiving contracts in Microsoft Dynamics, responding to requests for copies of contracts from lawyers and other stakeholders, and working with members of the legal and account teams to ensure the contracts being archived have all the required documents and profile information.

Responsibilities:

• Assist with maintaining an organized and up-to-date contract database using Microsoft Dynamics.

• Assist with extraction of attributes from intake forms and contracts, and performing basic administrative tasks including data entry.

• Work closely with legal teams, client contract management (CCM), and account teams to ensure all contracts being archived are complete.

• Respond promptly to requests for copies of contracts from lawyers and other stakeholders.

• Utilize available approved tools, such as Copilot & Visa secure ChatGPT to extract attributes from contracts for proper archiving.

• Support cross-functional teams to improve and streamline the contract archiving process.

• Perform other related duties as assigned.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

We are looking for an organized and detail-oriented Legal Assistant to join our team in Pasay City, Philippines. The successful candidate will play a key role in providing high-quality services to our business clients. The work will focus primarily on contract management operations, such as archiving contracts in Microsoft Dynamics, responding to requests for copies of contracts from lawyers and other stakeholders, and working with members of the legal and account teams to ensure the contracts being archived have all the required documents and profile information.

Responsibilities:

• Maintain an organized and up-to-date contract database using Microsoft Dynamics.

• Work closely with legal teams, client contract management (CCM), and account teams to ensure all contracts being archived are complete and attributes being tracked are accurately entered.

• Respond promptly to requests for copies of contracts from lawyers and other stakeholders.

• Utilize available approved tools, such as Copilot & Visa secure ChatGPT to extract attributes from contracts for proper archiving.

• Collaborate with other team members to improve and streamline the contract archiving process.

• Report metrics such as volumes monthly or as requested.

• Assist with tracking variances and/or exceptions and reporting such variances and/or exceptions monthly or as requested.

• Provide guidance and support to junior legal assistant.

• Perform other related duties as assigned.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

The Legal Delivery Team is the engine room of DBC Philippines. Providing scalable, quality conveyancing support and services to buyers and sellers across the retail residential market, the Legal Delivery team works across all states in Australia and includes a large team of operational specialists in the Philippines.

Working as part of a team providing service and support to customers who are buying or selling a residential property in Australia by answering their queries, preparing the required documents and completing the generation of the contract draft you will be responsible for:

• Acting as the key customer contact for either the buyer or seller, providing guidance, updates and directions proactively and responsively
• Data entry and drafting the contract according to our standard procedure
• Reviewing, collating and preparing legal documentation with a high attention to detail within fixed external deadlines
• Partnering with Lawyers and other support teams in Australia to escalate complex queries and for final review of customers documentation
• Coordinating with external stakeholders such as banks, local councils or the other parties conveyancer
• Calculating fees, taxes and other financial assessments relevant to property settlement for review

As a Senior Cyber Security Analyst,

You will safeguard our infrastructure and users, minimizing risks posed by cyber threats. You will promptly and effectively handle cyber attacks and data breaches, ensuring minimal recurrence of incidents.

Some of the things we expect you to do are to:

• Assist in monitoring company compliance to IT security policies.
• Assist with incident response and execution of company security incident response plan.
• Monitor and manage security events and alerts from a variety of sources (Azure, Defender, Keeper, Cloudflare etc).
• Assess and mitigate CVE’s and CVSS’s from multiple threat intelligence sources.
• Monitor threat intelligence and ensure risk mitigation and communication through the company where necessary.
• Assist with cybersecurity and phishing training for staff.
• Assist in maintaining and implementing GPO policies in Azure.
• Implement Identity Management via SSO across all MS Azure compliant tools used by the business.
• Works with Network Specialist to manage and monitor VPN and firewall rules.
• Works with System Administrator manage and monitor Azure.
• Ensure that IT security audits are conducted periodically or as needed.
• Assist in the development and maintenance of the Business Continuity (BC) and Disaster Recovery (DR) plans.
• Assist in development, maintenance and testing of the company’s security incident response plan.
• Develop and understand all testing necessary for a successful BC/DR execution.
• Assist and mentor desktop support and end users when they need to install or learn about new security products and/or procedures.

We would need you to be or have the following:

• Understanding of risk, threats, and vulnerabilities.
• Strong grasp of technical security controls with practical implementation experience.
• Proficiency in Microsoft Intune and Defender.
• Competence in Certificates, MFA (Multi-Factor Authentication), Vulnerability Management, and Penetration Testing.
• Familiarity with the NIST Cybersecurity Framework.
• Experience with Microsoft Active Directory or certification.
• Knowledgeable in incident response principles.
• Familiarity with threat intelligence and frameworks like MITRE ATT&CK.
• Exposure to IS027001 and SOC2 security frameworks.
• Familiarity with different IT domains: Network, Infrastructure, Systems Administration, Software Development, Database Administration, Change Management, Incident Management.
• Prior experience with ISO documentation and standards.

It would be awesome if you are or also have: 

• Strong cybersecurity tooling (MDM, Endpoint protection, IDS, WAF, Password Manager)
• Ability to identify gaps and/or risk exposure in programs.
• Strong problem solving and organizational skills.
• Strong written/verbal communication skills.
• Able to interact with stakeholders in cross-functional teams.
• Good team player interested in sharing knowledge and cross-training other team members and shows interest in learning new technologies and products.
• Ability to create quality documents

Be a part of the Smartsourcing crew

Are you interested in the legal industry, and want the freedom and flexibility to work from anywhere? Join our dynamic team as a Legal Administrative Assistant!

We are seeking a highly motivated individual to contribute their administrative expertise to our thriving law office, or in offices dealing with legal documents such as real estate companies, land title offices, or the court system. These agents handle tasks such as formatting legal correspondence, and/or reviewing and proofreading outgoing documents.

Duties and Responsibilities:

• Assist lawyers with day-to-day administrative tasks to ensure the smooth functioning of the legal office.
• Act as a liaison with clients, witnesses, and other stakeholders, ensuring clear and effective communication.
• Provide administrative support during trials, including the preparation of case briefs and summarizing depositions, interrogatories, and testimony.
• Conduct investigations and perform statistical/documentary research to contribute valuable insights to legal cases.
• Locate and develop case-relevant information, type up and file basic legal documents and correspondence.
• Answer and direct phone calls, maintain contact lists, and monitor deadlines while efficiently managing the calendar.

• A highschool diploma or equivalent.
• Proven working experience as a Admin or Legal Assistant
• Computer literacy, proficiency in English, and working knowledge of case management software.
• Excellent secretarial and organizational skills, with the ability to handle multiple tasks under pressure.
• Ability to work and maintain patience with individuals of diverse backgrounds and professional competencies.
• Committed to maintaining integrity and confidentiality on behalf of the company, the firm, and its clients.
• Willing to work on Pacific Standard Time (PST) schedule.
• Own Laptop or Desktop (8GB RAM, Core i5 or above) with an internet connection of at least 10 Mbps.

Role Description 

The IT Security Officer serves as the process and policy owner related to the availability, integrity and confidentiality of customer, business partner, employee and business information/data. A key element of the IT Security Officer’s role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. 

Key functions 

• Security Operations:
• own  and drive security education and security awareness programs across the organization
• own, drive and continuously improve security processes, policies and tooling 
• real-time analysis and triage of security threats and incidents
• proactively educate and inform executive management of developing security threats
• develop, implement and execute a strategic, comprehensive enterprise information security and IT risk management program 

• Application Security:
• introduce application and infrastructure security monitoring processes and tooling 
• design and manage and run application and infrastructure security testing (internally and with 3rd parties)

• Security governance: 
• make sure that security related initiatives are understood and funded 
• lead and drive future company security certification programs 
• represent the company security in front of technology partners 
• conduct internal technical and organizational audits 
• manage and support external audits 
• manage, handling and resolve security incident response cases

• degree in business administration or a technology-related field required 
• 5+ years of hands-on IT security experience 
• experience in risk management, information security and IT security
• knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• knowledge of PCI-DSS requirements for merchants working with BSP supervised financial institutions 
• excellent written and verbal communication skills and high level of personal integrity and empathy 
• innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• experience with contract and vendor negotiations and management including managed services

To be considered for the role, you will need to possess the following competencies: • Excellent organisational & time management skills • The ability to work well within a team as well as autonomously • First-rate attention to detail and communication skills (both oral and written) • Proficient knowledge of programs such as Microsoft Word, Excel and Outlook • The ability to work Mondays to Fridays onsite in our Sydney City office This is an entry level position that would be ideal for an individual who would like to become a career paralegal and has the viewpoint of committing to long term employment with the firm. You do not need to have previous legal experience or aspirations of becoming a lawyer to be considered for this position. Law students are welcome to apply but you must have a minimum 2-3 years left on your studies and be able to work full time without your studies affecting your ability to perform the work required or your attendance at work.

Join the A-Team and experience the A-Life!

Control Risks is currently looking for an experienced Security Director to be embedded with our client, a large multinational company, based in Mindanao, Philippines. This role will play a key part in the ongoing development of the client’s holistic security programme.

The Security Director will lead the security function and assume responsibility for the delivery of the security programme specific to the client's operations. The Security Director is tasked with the development of the security plan, which will assess threats, risks and resources. They will also coordinate security and incident training for local security officers. The Security Director will work closely with leaders from across the business, including Supply Chain, HR, Legal, IT, and Compliance areas. Effective engagement with third party security providers and government agencies is also required.

This position will be hired as an initial 1-year contract, with scope for further extension.

Responsibilities will include:

• Work with leadership team to analyse security threats and risks to the client's people and business. Implement security mitigation plans and establish relevant countermeasures. Escalate higher-level risks as required.
• Work with relevant teams to communicate security advice to travellers operating in high-risk locations.
• Work with business leaders to develop Incident Management plans. Support implementation of incident management framework.
• Oversee and ensure proper performance of the third party security guard companies engaged by the client.
• Create/update the security framework and ensure it is applied effectively.
• Conduct security risk assessments to validate effectiveness’ of security controls (people, processes and technology).
• Lead the implementation of effective and cost-efficient holistic security solutions.
• Conduct a physical security Risk Assessment for new sites or post major refurbishment, use or occupancy change, and major change to threat assessment.
• Understand and apply the full range of corporate investigative capabilities, whilst ensuring their lawful application.
• Coordinate and deliver security capability training required by employees, security teams and third-party partners.
• Possess contractual assessment skills for the implementation and review of security contracts.
• Prepare reports including security incident reporting, intelligence briefings, threats assessments and investigative reports.
• Utilise an active regional security network to share security information, trends and evolving operational practice. Participate in industry forums and understand emerging security technologies.

• 10+ years' experience in corporate security roles.
• Experience in a significant leadership role.
• Experience working within large complex corporate environments
• Strong English language skills and the ability to develop influential relationships with stakeholders at all levels of an organisation.
• Proficient IT (Microsoft Suite) skills.

Desired:

• Experience in developing and delivering training
• Experience working in the Philippines with insight into local working practices and cultures.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.