Information Security Analyst

About Electronic Transfer and Advance Processing Inc. (eTap Inc.)

Founded in 2015, Electronic Transfer and Advance Processing Inc. (eTap Inc.) is a Philippine-based company engaged in providing Financial Technology Services and the country’s leading manufacturer, operator, and developer of Custom Self-Service Transaction Machines & Payment Systems.

We are proud to lead the market with the spirit of ingenuity, collaboration, and customer-centric focus. eTap Inc. continuously innovates machines and payment systems for leading telecoms, digital banks, and payment aggregator companies, spurring impactful financial inclusion that enhances the prosperity of our communities.

Join eTap Inc.

Being part of the eTap community means working in a forward-thinking and innovative company that is shaping the future of financial services while making a tangible difference in the lives of many. If you're passionate about information security, technology, risk management, and making an impact, eTap is an exciting place to be.

What You Will Do

Information Security Policies and Standards

Create, review, and update information security policies, procedures, and standards to ensure they remain relevant, effective, and aligned with evolving security threats, regulations, and industry best practices.

Security Risk Assessment and Management

Identify, assess, and prioritize information security risks affecting the organization's systems, applications, infrastructure, and data. Develop and implement appropriate risk mitigation strategies and security controls.

Security Awareness and Training

Design and implement security awareness programs that educate employees on cybersecurity threats, security best practices, company policies, and compliance requirements. Help promote a strong security-conscious culture across the organization.

Incident Response and Investigation

Establish and maintain incident response procedures to ensure security incidents are promptly identified, investigated, contained, and resolved. Coordinate response activities, document findings, and recommend corrective and preventive actions.

Security Audits and Compliance

Conduct regular security assessments and audits to evaluate the effectiveness of security controls and identify areas for improvement. Support compliance with applicable laws, regulations, and industry standards such as GDPR, HIPAA, PCI DSS, ISO 27001, ISO 27701, and the Data Privacy Act.

Security Architecture and Implementation

Collaborate with IT and other technical teams in designing and implementing secure network, system, and application architectures. Assess new technologies and solutions to identify potential security risks and recommend appropriate safeguards.

Third-Party and Vendor Risk Management

Assess the information security posture of third-party vendors and service providers. Support the implementation and maintenance of vendor risk management processes to help ensure the security of outsourced systems, services, and company data.

Security Governance and Advisory

Provide information security guidance and recommendations to management and other stakeholders. Participate in governance committees and discussions involving security initiatives, risks, compliance, and organizational priorities.

Regulatory Monitoring and Compliance

Monitor changes in relevant information security laws, regulations, standards, and industry practices. Help ensure that security policies and processes remain aligned with regulatory and compliance requirements.

Security Documentation and Reporting

Maintain accurate records of security incidents, investigations, assessments, risks, and remediation activities. Prepare reports and security updates for management and relevant regulatory or compliance stakeholders.

Continuous Improvement

Identify opportunities to strengthen information security processes, controls, and practices. Stay updated on emerging cybersecurity threats, technologies, regulations, and industry best practices.

Other Duties

Perform other information security-related responsibilities as assigned, in accordance with company standards and operational requirements.

What an Information Security Analyst Looks Forward to Doing Well

An Information Security Analyst helps protect the organization's systems, applications, infrastructure, and data from security threats and risks. The role focuses on ensuring that appropriate security controls, processes, and resources are in place to support secure business operations.

By working closely with IT teams, management, and other stakeholders, the Information Security Analyst helps identify and manage security risks, develop effective information security plans, and implement processes that strengthen the organization's overall security posture.

This role provides an opportunity to develop expertise in information security governance, risk management, compliance, incident response, security architecture, and data protection while working in a fast-paced fintech environment.

Through an analytical, proactive, and collaborative approach, the Information Security Analyst plays an important role in protecting eTap's technology environment, supporting regulatory compliance, and building a strong culture of information security across the organization.

Why should you join us?

• Competitive Salary
• Good Perks & Benefits
• Opportunity to be part of a pioneering fintech company driving financial innovation in the Philippines
• A collaborative environment that encourages innovation, teamwork, and problem-solving
• A dynamic workplace where you can strengthen your expertise in cybersecurity, information security, risk management, and compliance
• Opportunity to work with technology and security solutions supporting financial technology and payment systems
• A mission-driven organization focused on expanding financial access and empowering communities

Why you shouldn’t

• If you're not interested in information security, cybersecurity, risk management, or compliance, this role may not align with your career goals.
• If you prefer a role with limited collaboration and stakeholder interaction, this position may not be the right fit.
• If you're not comfortable analyzing security risks, investigating incidents, and working with complex technical and compliance requirements, the role may feel demanding.
• If you're not passionate about continuous learning and keeping up with evolving cybersecurity threats, regulations, and industry standards, this role may be less fulfilling in the long run.

Why You

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience
• 3 to 5 years of professional experience in Information Security, Information Technology, Cybersecurity, or a related field
• Experience working with financial institutions, business process outsourcing organizations, government agencies, or other highly regulated environments is an advantage
• Strong knowledge of information security risk assessment and management, including identifying, assessing, prioritizing, and mitigating security risks
• Knowledge of relevant information security laws, regulations, and industry standards such as GDPR, HIPAA, ISO 27001, ISO 27701, PCI DSS, and the Data Privacy Act
• Experience in developing and implementing information security policies, procedures, standards, and controls
• Knowledge of security incident response, investigation, remediation, and corrective action processes
• Strong analytical and critical-thinking skills with the ability to assess security issues and recommend appropriate solutions
• Strong communication and collaboration skills, with the ability to explain technical security concepts to non-technical stakeholders
• Experience in security audits, assessments, compliance monitoring, or risk reviews
• Knowledge of third-party/vendor security risk management is an advantage
• Strong documentation and reporting skills
• Proactive, detail-oriented, and committed to maintaining a strong information security and compliance culture

Join the Revolution: Be Part of eTap Inc.!

Are you ready to step into a world where technology meets innovation, and every day is an opportunity to build something impactful? At eTap Inc., we’re not just another fintech company; we’re pioneers committed to transforming the financial landscape in the Philippines.