IT.Junior Information System Security Officer

Location: Makati City, Manila, Philippines

IT Security - Information Systems Security Office Team (‘ISSO Team’) is a group-wide resource, which covers all the divisions within the Citco Group of companies as defined on www.citco.com. The ISSO Team strategy is to uphold, maintain and continuously improve the Role Based Access Group (RBAG) framework within Citco’s User Access Management process. 

The ISSO Team has resources based in Amsterdam (The Netherlands), Manila (The Philippines), Hyderabad (India) and Toronto (Canada).

The Junior Information Systems Security Officer (Junior ISSO) will support access governance for production applications under the Role Based Access Group (RBAG) framework which is within Citco’s User Access Management process. The Junior ISSO will assist with access reviews, onboarding/offboarding of applications to Citco’s Intake/Outtake/RBAG process, monitoring production application access, and remediation activities while operating in a second-line, check and-challenge capacity.

 

• Work within the ISSO Team for providing an efficient and effective method to manage information security risk, 

improve the effectiveness of information security and user access control to ensure the organization’s information 

and information systems are protected from unauthorized access, use and disclosure. This includes: 

o Partner with the business and other group functions to develop and execute the User Access Management Framework.

o Conduct monthly monitoring reviews in accordance with the monitoring plans and report results to relevant stakeholders.

• Engage with Business and Support Function Management across the Citco Divisions to further improve the control 

environment in a collaborative manner. 

• Complete the tasks assigned by ISSO Management and effectively achieve the established goals and objectives. 
• Collaborate with IT Security team members to effectively and efficiently accomplish departmental goals and 

objectives.

• Reports to ISSO Management and cultivates and maintains positive, professional working relationships with ISSO 

staff. 

• Supports access governance processes by reviewing access requests and approvals for production applications in 

accordance with Citco’s User Access Management and Role-Based Access Group (RBAG) processes. 

• Assists with client access certification campaigns and reviews Active Directory (AD) security groups to ensure 

appropriate access and compliance with established security policies and procedures. 

• Monitors application access records, identifies potential anomalies or irregularities, and escalates issues to the ISSO 

Management for investigation and resolution. 

• Validates access provisioning activities against approved access requests and collaborates with provisioning teams 

to investigate and resolve discrepancies. 

• Maintains accurate and up-to-date documentation of access controls, remediation activities, and related security 

processes.

• Supports audit and compliance requests by providing accurate documentation, access records, and relevant 

information in a timely manner. 

• Participate in the onboarding of new applications to Citco’s User Access Management and Role-Based Access Group 

(RBAG) processes, ensuring alignment with established access control and security requirements. 

• Attends meetings with business and technical stakeholders, documents action items, and tracks assigned owners to 

support timely completion. 

• Completes assigned ISSO tasks within agreed timelines and in line with function objectives. 
• Monitors ACL control effectiveness and work with the team to improve application match rates 100%. 
• Identifies root causes of control breaks and supports preventive actions. 
• Maintains expertise through continuous learning and training to stay abreast of emerging and proposed developments in Information Security, Risk Management, and Auditing, leveraging insights from various industryorganizations and assessing their potential impact on the company.

 

Requirements 

Education: 

• The candidate should possess at least a relevant bachelor’s degree. 

   

Optional Qualification(s)/Certification(s): 

• CIA, CISA, CRISC, or other relevant IT/Risk/Audit/IT Security certifications. 

   

Professional Experience: 

• One up to three years of experience in progressive Risk Management, Internal 

Controls, Internal Audit, or IT Audit function within a financial institution or Big 4 

audit firm, ideally with experience in IT and/or IT Security functions. 

 

Computer Application(s): 

• Hands-on experience with automated internal audit applications and tools, such as 

ACL Analytics and SQL, is an advantage. Proficiency in Microsoft Word, Excel, 

PowerPoint, and Visio is also expected. 

 

Language(s): 

Excellent written and spoken English is required. 

 

Key Competencies:

  Client Focus. 

 Effective Communication. 

 Sound Decision-Making. 

 Results-Oriented 

 

Personal Characteristics: 

 Confident and articulate, with the ability to communicate clearly, concisely, and 

effectively, both oral and written. 

 Strong attention to detail, with a commitment to accuracy and quality. 

 Diplomatic and professional, with the tenacity and persistence required to 

achieve objectives and complete tasks. 

 A strong team player who works effectively within the ISSO function and 

collaborates successfully with colleagues and stakeholders to deliver a high

quality service. 

 Creative, innovative, and open to new ideas and approaches. 

 Willing to take on responsibility and work independently with minimal 

supervision. 

Working Hours/Conditions: 

 This role requires flexibility in providing cross-regional support. Prepared to 

partake on a shifting schedule -- APAC, EMEA and Americas. Occasional public 

holidays or weekend support may be required. 

 

Note: This job description is not intended to be all-inclusive. 

Employees may perform other related duties to meet the ongoing needs of the organisation.

IT.Junior Information System Security Officer Hybrid Set-up One Ayala, Makati Shifting Schedule