JOB TITLE: Cyber Security Risk Specialist - Penetration Tester (Senior Manager)

JOB LEVEL: Managerial

NUMBER OF VACANCIES: 1 FTE

WORK LOCATION: Makati City, Metro Manila, Philippines

REMOTE/ONSITE/HYBRID: On-site / Hybrid / Remote

FULL TIME/PART-TIME: Full-time

Position Summary, Description & Scope of Work:

We are seeking a dedicated Cyber Security Risk Specialist to join our team remotely in the Philippines. This role involves conducting comprehensive cyber risk assessments for our global clientele. The successful candidate will report directly to the Environmental Risk Management (ERM) Head and have a dotted line reporting to the AJG Global Head for Cyber Risk Management.

• Coordinate Cyber Risk Management: Collaborate with Gallagher International Office to manage cyber risk assessments and develop related services.
• Conduct Cyber Risk Surveys: Perform cyber risk assessment surveys for various clients, including pre-survey coordination, actual survey execution, and post-survey follow-up, utilizing AJG’s penetration testing methodology.
• Develop Expert Analysis: Provide expert opinions and analyses based on assessments, prepare detailed reports, and present findings to clients.
• Create Loss Control Reports: Develop comprehensive loss control recommendation reports with actionable insights for surveyed properties.
• Organize Data for Risk Modeling: Systematize data points and organize them as parameters for risk modeling requirements.
• Research and Service Development: Conduct research and develop new services for risk engineering.
• Translate Risk to Insurance Products: Convert necessary risk transfers into insurance products offered by Philinsure.
• Client Engagement: Meet with prospective and existing clients to build business relationships and support sales efforts (no sales targets).
• Ensure Compliance: Ensure adherence to local, national, and international cyber risk, security, and data privacy laws.
• Conduct Research: Research relevant topics as needed.
• Other Tasks: Other assigned duties as required.

• Educational Qualifications: Bachelor's degree in Information Technology, Computer Science, or related field.
• Experience Level: 1-3 years of experience in information security or cybersecurity roles.
• Skills and Competencies: Proficient in risk management, understanding of security protocols, incident management, and IT skills.
• Responsibilities and Duties: Develop security policies, manage vulnerabilities, oversee incident response, and ensure compliance with security standards.
• Working Conditions: Office setting, may require on-call hours for emergency response.
• Qualities and Traits: Analytical thinker, detail-oriented, strong leadership skills, and excellent communication abilities.