Total 4 sourcing specialist job vacancies in Legal / Public / Security category in The Philippines

We are looking for a skilled Information Security Governance, Risk, and Compliance (GRC) Specialist to join the Avaloq CISO Governance team. The CISO Governance team is responsible for developing, implementing, and maintaining our organization's Information Security governance, risk management, and compliance programs. The ideal candidate has a deep understanding of information security practices, regulatory requirements, and risk management frameworks. The role is based in Manila.

Your key responsibilities

Your key responsibilities will include the following domains. You don't have to be an expert on everything, but you must be willing to learn!

• Governance and Compliance
  • Participate in the development and maintenance of Avaloq's information security governance framework.
  • Lead and aid with compliance-related issues across stakeholders.
  • Work closely with internal and external audits, both to support the audit activities and to manage the remediation of findings.
  • Report to management and relevant stakeholders on compliance status and security governance effectiveness.
• Policy Management
  • Provide guidance and assist in the drafting, revision, and implementation of security policies and procedures.
  • Monitor and evaluate the effectiveness of implemented policies and procedures.
  • Participate in regular policy reviews to ensure alignment with changing regulations and organizational objectives.
• Security Risk Management
  • Conduct and guide risk assessments to identify potential security threats and vulnerabilities.
  • Conduct security assessment of third-party vendors to evaluate compliance with Avaloq’s security standards.
  • Monitor third-party compliance with agreements and performance against organizational benchmarks.
• Awareness and Advocacy
  • Be an advocate for security among your colleagues.
  • Participate in the development and implementation of a comprehensive cybersecurity awareness program.
  • Craft engaging and informative security training materials for Avaloq employees.
  • Measure the effectiveness of employees' knowledge and competencies and adapt strategies based on feedback and trends.
  • Participate in internal security awareness activities such as new employee onboarding.
  • Stay updated with the latest developments in information security, risk management, and compliance.

The Governance, Risk, and Compliance (GRC) team member will be reporting to the Head of Information Security and is responsible for supporting and enhancing the organization’s efforts to ensure adherence to policies, regulatory requirements, and industry security best practices. This role involves coordinating, executing, and overseeing various tasks related to governance, risk management, and compliance to protect the organization's assets, reputation, and ensure operational effectiveness.

The GRC specialist will work together with the Security Operations Leader, Security Operations Engineer, and QIMA internal stakeholders to meet the objectives of the audit requirements, identify risks present in the group, and to assess non-conformities and non-compliance against the organization’s Information Security Management System Policy and align the remediation plan with target dates against the respective owners.

The GRC specialist must have a good understanding of the different security and data privacy laws and regulations and industry security best practices with the ability to apply these standards to the QIMA environment.

Key Responsibilities:

1. Governance:
   • Develop, implement, and maintain policies, procedures, and frameworks to support QIMA’s organizational governance objectives.
   • Foster a culture of security, compliance and ethical behavior within the organization.
   • Conduct regular assessments and audits of governance processes to identify areas for improvement.
2. Risk Management:
   • Identify, assess, and prioritize risks for remediation that may impact the organization’s operations and overall security posture.
   • Develop risk mitigation strategies and monitor their effectiveness, until closure.
   • Maintain a risk register and ensure all risks are documented, evaluated, and tracked.
   • Collaborate with various departments to create and implement risk management plans.
3. Compliance:
   • Stay up to date with changing regulations and assess their impact on the organization.
   • Work with the Data Privacy Office and Legal teams to ensure the organization complies with all relevant laws, regulations, and standards.
   • Conduct regular internal reviews and identify non-conformities against QIMA’s Information Security Management System Policy that needs to be addressed.
   • Deploy regular security awareness to all employees and work with training team for security trainings and programs to be delivered to QIMA.
4. Documentation and Reporting:
   • Maintain accurate records of GRC activities, including policy documents, risk assessments, and compliance reports.
   • Prepare and present reports on governance, risk, and compliance activities to senior management and the board of directors.
   • Document incidents and breaches and manage remediation actions.
5. Collaboration and Communication:
   • Liaise with Security, IT, Compliance, Legal, HR, and other departments and stakeholders to ensure cohesive compliance and risk management efforts.
   • Act as a point of contact for regulatory bodies, auditors and client security requirements.
   • Provide guidance and support to all QIMA employees on GRC-related matters.

LOOKING FOR FILIPINO CANDIDATES

Position : Legal Contract Specialist (Paralegal Assistant)

Work Hours (Client) : 7am to 4pm ET | Mon - Fri

Work Hours (MNL) : 7pm to 4am MNL | Mon - Fri

Holidays : PH Regular and Special Non Working holidays

Pay Range : $800 - $1500/month (depending on interview assessment and client's approval) Please take note that pay will be given in USD

Company/Client Overview:

SOUTH FLORIDA’S COMMERCIAL DOOR & GLASS SPECIALISTS SINCE 1955

a single source provider coordinating our in-house product and service groups while leveraging decades of experience and partner-vendor relationships to deliver a high-value client experience.

Duties and Responsibilities:

• Review Contracts: Read and understand the details in various contracts. Identify any issues that might be problematic.
• Revise Contracts: Make changes in a legal fashion to contracts to protect the interests of their employer or client. This includes altering terms, adding new clauses, or removing sections as needed.
• Communicate: Contact with clients, DD&G co-workers, and other parties.
• Organize: Keep all contracts and related documents well-organized. Use databases or filing systems to track contracts’ statuses.

Minimum Requirements:

• Bachelor's degree in Paralegal Studies or related field preferred
• Must have a total of 5+ years of related relevant experience in contract drafting and negotiation for clients
• Experience with leading contract negotiation and analysis within the construction industry or related industry
• Remote experience, having worked with US companies following US Timezone preferred
• Excellent organizational and communication skills
• Ability to work with confidential documents
• Proficiency in Google Workspace and Microsoft Office
• Attention to detail and accuracy
• Strong research skills.

Wrist Service Center is looking for an Information Security Specialist who will focus on operational security. You will hold profound skills within all or some of the belove areas:

• Network Security
• Information Security Architecture
• Cloud Security (Azure)
• MDR/SIEM/Log Analytics
• Incident Response
• Vulnerability and Penetration Testing
• Identity and Access management (IAM)
• Technical Security and Risk assessments
• Disaster Recovery Planning

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: LINKS

What you'll be doing:

Define technical requirements for the organization

• Assist in conducting security and risk assessments as well as technical audits to identify vulnerabilities and ineffective controls.
• Utilize frameworks and active scanning to identify potential for improvements.
• Assist in prioritizing technical initiatives
• Depending on the area, assist in implementing or configuring security controls.

Handle security incidents and incoming tasks from the organization (Tickets)

• Take part in our team's responding to security alerts and security incidents.
• Consult with the organization  

Optimize our incidence response capability

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Configure use cases for our detection and response solutions.

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, and Security+, is a plus.
• Great English communication skills
• Knowledge in:
  • Network Security
  • Cloud Security (Azure)
  • MDR/SIEM/Log Analytics
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
  • Mitre ATT&CK and D3FEND