We are looking for a skilled Information Security Governance, Risk, and Compliance (GRC) Specialist to join the Avaloq CISO Governance team. The CISO Governance team is responsible for developing, implementing, and maintaining our organization's Information Security governance, risk management, and compliance programs. The ideal candidate has a deep understanding of information security practices, regulatory requirements, and risk management frameworks. The role is based in Manila.

Your key responsibilities

Your key responsibilities will include the following domains. You don't have to be an expert on everything, but you must be willing to learn!

• Governance and Compliance
  • Participate in the development and maintenance of Avaloq's information security governance framework.
  • Lead and aid with compliance-related issues across stakeholders.
  • Work closely with internal and external audits, both to support the audit activities and to manage the remediation of findings.
  • Report to management and relevant stakeholders on compliance status and security governance effectiveness.
• Policy Management
  • Provide guidance and assist in the drafting, revision, and implementation of security policies and procedures.
  • Monitor and evaluate the effectiveness of implemented policies and procedures.
  • Participate in regular policy reviews to ensure alignment with changing regulations and organizational objectives.
• Security Risk Management
  • Conduct and guide risk assessments to identify potential security threats and vulnerabilities.
  • Conduct security assessment of third-party vendors to evaluate compliance with Avaloq’s security standards.
  • Monitor third-party compliance with agreements and performance against organizational benchmarks.
• Awareness and Advocacy
  • Be an advocate for security among your colleagues.
  • Participate in the development and implementation of a comprehensive cybersecurity awareness program.
  • Craft engaging and informative security training materials for Avaloq employees.
  • Measure the effectiveness of employees' knowledge and competencies and adapt strategies based on feedback and trends.
  • Participate in internal security awareness activities such as new employee onboarding.
  • Stay updated with the latest developments in information security, risk management, and compliance.

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?

This security engineering position will be part of a skilled and highly functioning team where there is a lot of opportunity and enhance existing skills or learn new ones. This role will help troubleshoot, maintain, and act as subject matter experts for our Managed Security Services clients. This role will be supporting a variety of security controls across multiple technology platforms.

About the team:

Managed Security Services (MSS) Border Protection Team is responsible for the following MSS services:

• Firewall Management

• VPN Management

• MFA

About the role:
As an IT Security Analyst with FIS, your skills will be put to the test on the front lines of cyber-crime. Information security is at the heart of fintech and you’ll help protect and secure highly-sensitive financial data for customers around the world.

What you will be doing:

• Implementing information security controls and preventing hackers from infiltrating company information and jeopardizing programs.

• Maintaining and controlling access to security systems and utilizing applicable encryption methods to maintain the company's firewall.

• Working with the user community to understand security needs.

• Proactively handles security vulnerabilities and responds to active threats

• Maintenance, configuration, and deployment of NGFW including but not limited to: Cisco ASA, Fortinet, Palo Alto

• Log analysis and troubleshooting

• Deep understanding of routing and switching technologies, security best practices, L2/L3 networks, Ipv4, NAT, BGP, IPSec, Policy-based routing

• Communicating and working effectively with cross functional teams to deliver solutions.

• Reviewing and Implementing Firewalls in line with company and security best practices

• Experience with project-based work and assisting with customer escalations  

• Experience with scripting technologies and centralized deployment preferred but not required

What you will bring:

• Knowledge of network and security technologies.

• Experience with network design and engineering.

• A bachelor's in computer science or a related field, or the equivalent experience.

• Firewall Management experience

• Broad IT skillset

• Understanding of network flow

• IT fundamentals

• Security fundamentals

• Technical Troubleshooting

Added bonus if you have:

• Previous Security Experience

• Fortigate, Cisco ASA, or Palo Alto Experience

#LI-CV1

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

We are looking for an organized and detail-oriented Legal Assistant to join our team in Pasay City, Philippines. The successful candidate will play a key role in providing high-quality services to our business clients. The work will focus primarily on contract management operations, such as archiving contracts in Microsoft Dynamics, responding to requests for copies of contracts from lawyers and other stakeholders, and working with members of the legal and account teams to ensure the contracts being archived have all the required documents and profile information.

Responsibilities:

• Maintain an organized and up-to-date contract database using Microsoft Dynamics.

• Work closely with legal teams, client contract management (CCM), and account teams to ensure all contracts being archived are complete and attributes being tracked are accurately entered.

• Respond promptly to requests for copies of contracts from lawyers and other stakeholders.

• Utilize available approved tools, such as Copilot & Visa secure ChatGPT to extract attributes from contracts for proper archiving.

• Collaborate with other team members to improve and streamline the contract archiving process.

• Report metrics such as volumes monthly or as requested.

• Assist with tracking variances and/or exceptions and reporting such variances and/or exceptions monthly or as requested.

• Provide guidance and support to junior legal assistant.

• Perform other related duties as assigned.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

• Responsible for setting up and configuring the WFM system according to our clients’ business needs. This includes setting up user roles, permissions, and access levels.
• Collaborate with OSC to manage user accounts, including adding and removing users, resetting passwords, and managing user permissions and access.
• Onboarding of new team members in Genesys systems
• Review and Process change request for making changes or creating new Pulse dashboards.
• Serve as internal support liaison for Genesys system upgrades and testing.
• Maintaining configuration for exceptions, time off, scheduled state groups, etc.
• Collaborating with CCTS to update VQ configurations for Pulse.
• Serve as the first line of technical support for any issues users may encounter.
• Continuously monitor and evaluate the effectiveness of the WFM system, suggest and implement improvements as needed. This could include introducing new features, streamlining processes, or enhancing user experience.
• Ensures that the use of the WFM system complies with all relevant policies, laws, and regulations. This may include data privacy regulations, labor laws, and internal company policies.
• Ensure the integrity of data within the system, including importing and exporting data, and setting up and managing integrations with other systems.
• Provide training and support to users, helping them understand how to use the system effectively.

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

As a Senior Cyber Security Analyst,

You will safeguard our infrastructure and users, minimizing risks posed by cyber threats. You will promptly and effectively handle cyber attacks and data breaches, ensuring minimal recurrence of incidents.

Some of the things we expect you to do are to:

• Assist in monitoring company compliance to IT security policies.
• Assist with incident response and execution of company security incident response plan.
• Monitor and manage security events and alerts from a variety of sources (Azure, Defender, Keeper, Cloudflare etc).
• Assess and mitigate CVE’s and CVSS’s from multiple threat intelligence sources.
• Monitor threat intelligence and ensure risk mitigation and communication through the company where necessary.
• Assist with cybersecurity and phishing training for staff.
• Assist in maintaining and implementing GPO policies in Azure.
• Implement Identity Management via SSO across all MS Azure compliant tools used by the business.
• Works with Network Specialist to manage and monitor VPN and firewall rules.
• Works with System Administrator manage and monitor Azure.
• Ensure that IT security audits are conducted periodically or as needed.
• Assist in the development and maintenance of the Business Continuity (BC) and Disaster Recovery (DR) plans.
• Assist in development, maintenance and testing of the company’s security incident response plan.
• Develop and understand all testing necessary for a successful BC/DR execution.
• Assist and mentor desktop support and end users when they need to install or learn about new security products and/or procedures.

We would need you to be or have the following:

• Understanding of risk, threats, and vulnerabilities.
• Strong grasp of technical security controls with practical implementation experience.
• Proficiency in Microsoft Intune and Defender.
• Competence in Certificates, MFA (Multi-Factor Authentication), Vulnerability Management, and Penetration Testing.
• Familiarity with the NIST Cybersecurity Framework.
• Experience with Microsoft Active Directory or certification.
• Knowledgeable in incident response principles.
• Familiarity with threat intelligence and frameworks like MITRE ATT&CK.
• Exposure to IS027001 and SOC2 security frameworks.
• Familiarity with different IT domains: Network, Infrastructure, Systems Administration, Software Development, Database Administration, Change Management, Incident Management.
• Prior experience with ISO documentation and standards.

It would be awesome if you are or also have: 

• Strong cybersecurity tooling (MDM, Endpoint protection, IDS, WAF, Password Manager)
• Ability to identify gaps and/or risk exposure in programs.
• Strong problem solving and organizational skills.
• Strong written/verbal communication skills.
• Able to interact with stakeholders in cross-functional teams.
• Good team player interested in sharing knowledge and cross-training other team members and shows interest in learning new technologies and products.
• Ability to create quality documents

Be a part of the Smartsourcing crew

Wrist Service Center is looking for an Information Security Lead. The perfect candidate holds a profound understanding of both GRC and operational aspects of Information Security and is preferably an Information Security Architect. This position will be reporting to the CISO and acting as a team lead for currently 4 local information security Specialists at the Manilla office, while also conducting tasks related to the field. The position will be closely working with HQ Security in Denmark. The entire Manilla team is considered part of the Information Security department, led by the CISO.  

As this security team in Manilla is only just being established, the entire team will take part in defining the capabilities of the team – naturally in collaboration with the HQ Security team and the CISO himself. 

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: https://bit.ly/SR_WSCCareers

What you'll be doing:

Lead the Information Security Team at the Manila office

• Define and align initiatives and tasks with the CISO
• Assist the CISO in 
  • Ensuring high work satisfaction among the Manilla Team
  • Ensuring the Manilla team is trained.
  • Managing our backlog and sprints.
• Define the capabilities of the information security department.  

Risk Management 

• Assist in ensuring quality and necessary pace in assessments. 
• Conduct and review Risk Assessments. 
• Monitor/Audit risks and controls 
• Take the top lead on Third-Party Risk management

Operational Security

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Take part in managing our Vulnerability Management. 
• Assess Security Architecture 

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, Security+, ISO27001, CISM, CRISC is a plus
• Great English communication skills
• Proven leadership experience
• Knowledge in:
  • Risks management
  • Third-Party Risk Management
  • Control Management
  • Frameworks like ISO 27001/27002/27005, NIST 800-53, NIST CSF, etc. 
  • Defining policies and procedures
  • Network Security
  • Cloud Security (Azure) 
  • MDR/SIEM/Log Analytics 
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
• Not afraid to challenge the CISO on professional aspects

Location: Times Plaza Building, U.N. Avenue corner Taft Avenue, Manila City

Work setup: On-site

Wrist Service Center is looking for an Information Security Specialist who will focus on operational security. You will hold profound skills within all or some of the belove areas:

• Network Security
• Information Security Architecture
• Cloud Security (Azure)
• MDR/SIEM/Log Analytics
• Incident Response
• Vulnerability and Penetration Testing
• Identity and Access management (IAM)
• Technical Security and Risk assessments
• Disaster Recovery Planning

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: LINKS

What you'll be doing:

Define technical requirements for the organization

• Assist in conducting security and risk assessments as well as technical audits to identify vulnerabilities and ineffective controls.
• Utilize frameworks and active scanning to identify potential for improvements.
• Assist in prioritizing technical initiatives
• Depending on the area, assist in implementing or configuring security controls.

Handle security incidents and incoming tasks from the organization (Tickets)

• Take part in our team's responding to security alerts and security incidents.
• Consult with the organization  

Optimize our incidence response capability

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Configure use cases for our detection and response solutions.

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, and Security+, is a plus.
• Great English communication skills
• Knowledge in:
  • Network Security
  • Cloud Security (Azure)
  • MDR/SIEM/Log Analytics
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
  • Mitre ATT&CK and D3FEND

WHAT YOU WILL DO:

• Summarize energy data and extrapolate results to estimate carbon emissions.
• Document the overall process from data capture to data synthesis and data summary.
• Collaborate effectively with cross-functional teams and stakeholders to deliver high-quality results.
• Ensure data accuracy, consistency, and integrity by conducting quality checks and collaborating with relevant teams.
• Conduct legal research and analyze legal data when needed.
• Stay abreast of changing environmental regulations, standards, and reporting requirements related to carbon emissions.
• Perform other roles as may be deemed necessary within the People and Legal Ops Department.

WHO YOU ARE:

• College Graduate
• Proficiency in data analysis
• Proficient with Microsoft Excel, including experience using Pivot Tables
• Analytical, organized, and detail-oriented approach
• Creative problem-solver and comfortable proposing solutions when the data available for analysis is incomplete.
• Willingness to learn and open to cross training.
• Ability to manage shifting priorities and multitask effectively.
• Familiarity with sustainability reporting frameworks is a plus.

Avid is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

#LI-Hybrid #L1-CME1

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

DISCLAIMER: This job posting is intended for the active pooling of candidates who will become part of our talent pool. Your qualifications will be assessed against both current and future job openings. Should your application align with a role that corresponds to your skills and experience, and an opportunity arises, our recruitment team will reach out to you immediately. Please note that this does not guarantee immediate placement or contact. Additionally, we exclusively consider applications from individuals who are Philippine citizens and currently reside in the Philippines during their application process.

Responsibilities

• Oversee the company's IT systems, including hardware, software, and networks.
• Ensure the reliability, security, and efficiency of all IT systems.
• Manage technology projects from conception to completion.
• Develop and enforce IT policies and procedures.
• Analyze the needs of the company's different departments for IT support.
• Collaborate with other departments to identify opportunities for IT-based solutions.
• Stay up-to-date with the latest trends and technologies in the IT field.

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in technology or IT risk management; experience in a supervisory capacity is a plus but not required.
• Strong knowledge of firewalls, endpoint security, mobility management, vulnerability scanning, and network and system security protocols.
• Experience with cloud-based solutions (e.g. AWS, Azure, Google Cloud), project management tools, and methodologies.
• Proficient in programming languages (e.g. Python, Java, C).
• Excellent communication and problem-solving skills.

The Information Security Analyst focuses on assessing security systems, identifying flaws in these systems, and implementing corrective measures. The role also focusses on improving the effectiveness of security systems and creating procedural guidelines for employees to help protect company data and networks.

• Update existing security systems.
• Create disaster recovery plans.
• Monitor and implement antivirus software.
• Conduct penetration testing.
• Gather and assess user feedback on how to improve the effectiveness and user experience of systems and programs.
• Create various security policies and updating employees on the guidelines to follow.
• Assess existing computer systems for security issues and risks.
• Create and verifying security plans with third-party vendors.
• Assess and test any new software and technology.
• Conduct training programs for security programs and protocol.
• Create incident reports as necessary.
• Oversee data access and data maintenance.
• Upgrade data and security systems and enabling security software integration.
• Assess any security breaches and identifying vulnerabilities