Jr Information Security Officer (Audit and Compliance)

The Jr. Information Security Officer for Audit and Compliance or Security Compliance Officer will be responsible for evaluating and improving the effectiveness of TSA’s information security policies, controls, and procedures through audit and assurance activities in accordance with TSA adopted standards particularly ISO 27001, PCI DSS, and others. This role ensures compliance with relevant standards, identifies vulnerabilities, and provides recommendations to mitigate risks.

The Security Compliance Officer will work closely with the Information Security team with regards to the implementations of the organisation’s Information Security Program, IT department, business units, and both internal and external audit teams to conduct compliance and assurance evaluations of the organisation's security posture. The role will also involve continuous monitoring of compliance and conformity and collaborating on the implementation of industry best practices and regulatory standards.

Essential:

• • • • Minimum 3 years’ experience in IT and information systems and security compliance and assurance activities with a good understanding of ITGC / ITAC.
      • Must have excellent understanding of ISMS based on ISO 27001 and ISO 27002, NIST CSF 2.0, NIST SP 800-53, PCI DSS.
      • Familiar with at least one or more of any IT, IS assurance frameworks such as, but not limited to:
        • ISO 19011 Auditing management systems
        • PCI DSS assessment
        • ISACA ITAF
        • COBIT 5 or 2019 foundations
      • Knowledgeable in performing internal audit engagements especially conducting fieldwork, reporting, and planning.
      • Must have excellent communication skills including ability to write and speak comfortably and articulate technical matters to non-technical audience.
      • Must have excellent work ethics and ability to work with various business units and deliver initiatives effectively and efficiently

Qualifications:

• Bachelor’s degree in IT/IS, cyber security, computer engineering, accounting or equivalent
• Industry IT audit certifications are preferred such as (but not necessarily required)
  • ISO 27001 Lead Implementer / Lead Auditor
  • PCI QSA
  • CISA, or any equivalent audit and assurance related certifications (CIA, CRISC, etc.)
• At least 3 years of experience in managing and working with Internal Auditors, External Auditors and with IT subject matter experts.
• Demonstrated experience in implementing, maintaining and improving information security management systems in alignment with ISO 27001/27002.

Like & Share the TSA FB Page and be up to date with TSA News!

Facebook PH

Check out our social media pages:

TSA Website

Instagram

LinkedIn

Philippines Office address:

14F Five E-com Center, Harbor Drive, Mall of Asia Business Complex, Pasay City, Metro Manila, Philippines 1300