Senior Compliance Analyst  

Purpose

Manage and support information systems and security implementation and audits in accordance to set objectives. Continuously develop and enhance information systems and security knowledge and skills through participation in upskilling activities, training and awareness initiatives appropriate to the position.

Duties and Responsibilities

• Manage internal and external audit and consultation projects delegated by the Compliance Consulting Manager or Compliance Service Head and contribute to the attainment of set goals and established key metrics through effective project plan implementation.
• Demonstrate the Compliance Consultant role and subject matter expertise by providing relevant, industryrecognized best practices, standards and regulatory recommendations and advisories for both internal and external communications.
• Enhance information security knowledge and skills through continued learning and participate in credentialbuilding activities to gain the prescribed certifications. Immerse in and facilitate group-initiated activities that promotes soft skills development required for the role.
• Conduct information systems audit/assessment and prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
• Assist top management in developing its respective management system as required by certification standards such as ISO 27001, ISO 22301, ISO 27701, etc.
• Lead the development and control of management documentation such as policies, guidelines, and procedures as necessary.
• Establish and maintain the organization’s Risk Management methodology based on the context of the organization.
• Conduct of the internal audit program as facilitated by the internal audit team. As well as providing assistance to the organization on the preparation for external audit, during the audit, and postaudit activities.
• Maintain and enhance the organization’s management systems programs through the development of awareness initiatives, monitoring of metrics based on objectives.
• Leads in the conduct of quality checks through periodic sampling, random checking for quality of tickets, reports and calls.
• Support performance monitoring of the team through proactive feedback.

A. Minimum Education

• Bachelor’s Degree of any Information Technology, Accounting or Engineering-related studies

B. Minimum Experience/Training

• Has experience in project and/or program management

• Certifications related to Information Security (CISA, CEH, CCNA, CCNP ,etc) is an advantage
• Certifications related to standards and framework such as ISO 27001, ISO 22301, ISO 27701, ISO 20000-1, PCI-DSS, COBIT and ITIL is beneficial.