Total 6 Others/Any construction safety health officer job vacancies in Legal / Public / Security category in The Philippines

The Legal Delivery Team is the engine room of DBC Philippines. Providing scalable, quality conveyancing support and services to buyers and sellers across the retail residential market, the Legal Delivery team works across all states in Australia and includes a large team of operational specialists in the Philippines.

Working as part of a team providing service and support to customers who are buying or selling a residential property in Australia by answering their queries, preparing the required documents and completing the generation of the contract draft you will be responsible for:

• Acting as the key customer contact for either the buyer or seller, providing guidance, updates and directions proactively and responsively
• Data entry and drafting the contract according to our standard procedure
• Reviewing, collating and preparing legal documentation with a high attention to detail within fixed external deadlines
• Partnering with Lawyers and other support teams in Australia to escalate complex queries and for final review of customers documentation
• Coordinating with external stakeholders such as banks, local councils or the other parties conveyancer
• Calculating fees, taxes and other financial assessments relevant to property settlement for review

The Information Security Officer will plan, implement, upgrade, and monitor security protocols for the protection of the TSA’s computer networks and information.   

The Information Security Officer will foster collaboration between IT and business units, ensuring compliance in Technology programs and projects, and working closely with Internal and External Audit teams throughout the process. They will also manage the process of gathering, analysing, and assessing information security and privacy threats while maintaining and monitoring evolving security best practices. 

Information Security Officer will be responsible for overseeing information security, cybersecurity and IT risk management programs based on industry-accepted information security and risk management frameworks. This individual will be an integral part of the Information Technology organisation reporting directly to the VP of Engineering to help improve and communicate the maturity levels of information security, state of cybersecurity and IT risk practices across TSA. 

Responsibilities

• Document controller
  - Collate and organise documents related to compliance against international standards and regulatory requirements
  - Engage with ISMS stakeholders and other business unit heads and representatives in collecting pertinent documents
  - Manage documents and track versions, changes, and revisions according to emerging trends, regulatory and industry standard requirements
• Compliance management
  - Work with the information security team in performing gap analysis, policy and procedure development
  - Review and assess compliance of initiatives against adopted standards of the organisation (ISO 27001:2022, PCI DSS, etc.)
  - Review and assess compliance requirements against regulations of Office of the Australian Information Commissioner (OAIC), National Privacy Commission (NPC) for the Philippines, and Office of the Privacy Commissioner (OPC) for New Zealand.
  - Review and assess compliance requirements against other pertinent regulations such as GDPR and other similar privacy and security regulations, and international standards such as CIS Controls, NIST CSF 2.0, NIST RMF, and other similar standards.
• Governance and risk management
  - Assist the information security team in engaging with ISMS stakeholders of the TSA security governance program initiatives and requirements.
  - Assist the information security team in third-party risk management and other pertinent process and procedures related to managing security risks over vendors and third-party service providers.
  - Perform risk assessments and risk reviews pertinent to the ISMS according to ISO 27001, PCI DSS and other relevant security and privacy standards.
  - Provide security awareness to all employees by means of presentations, communications and other methodologies adopted by TSA and provide recommendations for strengthening and ensuring delivery of the security awareness campaign.
•  Security Incident management
  - Work with the information security team in reviewing, revising, and developing incident response plan and playbook
  - Regularly perform preparations and capability assessments and testing of incident response of TSA
  - Collaborate with information security team and IT specialists and engineers in determining areas for improvement with regards to incident response handling
• Cyber threat intelligence and vulnerability management
  - Perform threat intelligence through OSINT and other open-source methodologies
  - Assist the information security team in preparation and planning VAPT and red teaming activities
  - Develop, collate, and manage related documents in threat and vulnerability management.

Your Team

We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center.

The role requires a strong background and understanding of all cyber security domains.

In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes.

Your mission

• Identify cyber security gaps in existing and proposed projects.
• Recommend Cyber Security changes or enhancements and drive implementation
• Manage and cultivate the defined security services and the relationship to our service providers
• Participate in organizational Security projects, as required
• Support in development processes, and procedures for the team
• Assist correlating alerts, implementing monitoring Use Cases
• Provide implementations, recommendations for protecting and resolving threats and incidents
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security
• Manage and support in major Cyber Security Incidents
• Support in 24/7 shifts rotation in the future
• Act as a technical Lead role model in the team on driving initiatives and projects

The Legal Delivery Team is the engine room of DBC Philippines. Providing scalable, quality conveyancing support and services to buyers and sellers across the retail residential market, the Legal Delivery team works across all states in Australia and includes a large team of operational specialists in the Philippines.

Working as part of a team providing service and support to customers who are buying or selling a residential property in Australia by answering their queries, preparing the required documents and completing the generation of the contract draft you will be responsible for:

• Acting as the key customer contact for either the buyer or seller, providing guidance, updates and directions proactively and responsively
• Data entry and drafting the contract according to our standard procedure
• Reviewing, collating and preparing legal documentation with a high attention to detail within fixed external deadlines
• Partnering with Lawyers and other support teams in Australia to escalate complex queries and for final review of customers documentation
• Coordinating with external stakeholders such as banks, local councils or the other parties conveyancer
• Calculating fees, taxes and other financial assessments relevant to property settlement for review

• Develop and maintain IT Audit and Risk assessments for departments, under the guidance of our Cybersecurity/GRC Manager
• Review impacts of changes pre/post-implementation to our system to maintain or improve our security posture
• Evaluate and spread the word on controls and policies to drive compliance, and provide feedback to various security/compliance committees
• Develop material and coordinate with vendors on information security training and awareness
• Disseminate security communications across the organization as required
• Collect evidence for purposes of audit and compliance
• Assist with assessing the security posture of third-party vendors and suppliers
• Guard Sleek from internal/external threats. Raise and respond to security incidents reported, and communicate with committees to initiate DR/BCP if necessary
• Report and track incidents raised in SIEM and other sources
• Aid the proper classification and rating of risk items
• Initiate regular improvement drives for security across departments

Role Description 

The IT Security Officer serves as the process and policy owner related to the availability, integrity and confidentiality of customer, business partner, employee and business information/data. A key element of the IT Security Officer’s role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. 

Key functions 

• Security Operations:
• own  and drive security education and security awareness programs across the organization
• own, drive and continuously improve security processes, policies and tooling 
• real-time analysis and triage of security threats and incidents
• proactively educate and inform executive management of developing security threats
• develop, implement and execute a strategic, comprehensive enterprise information security and IT risk management program 

• Application Security:
• introduce application and infrastructure security monitoring processes and tooling 
• design and manage and run application and infrastructure security testing (internally and with 3rd parties)

• Security governance: 
• make sure that security related initiatives are understood and funded 
• lead and drive future company security certification programs 
• represent the company security in front of technology partners 
• conduct internal technical and organizational audits 
• manage and support external audits 
• manage, handling and resolve security incident response cases

• degree in business administration or a technology-related field required 
• 5+ years of hands-on IT security experience 
• experience in risk management, information security and IT security
• knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• knowledge of PCI-DSS requirements for merchants working with BSP supervised financial institutions 
• excellent written and verbal communication skills and high level of personal integrity and empathy 
• innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• experience with contract and vendor negotiations and management including managed services