Cyber Security Governance Analyst
Full-time
QBE Group Shared Services Centre
Primary Details Time Type: Full timeWorker Type: EmployeeThe purpose of this role is to support transformational change in Cyber and information security risk management within the core business, 3rd party suppliers, programs, and projects at QBE. This role is part of a Group Cyber Security team responsible for safeguarding the company from sophisticated cyber threats, requiring deep technical knowledge and a collaborative approach to deliver strategic business outcomes. Shadow IT Identification & Risk Assessment
- Support the identification and analysis of Shadow IT, Business-Managed IT solutions and 3rd Party-Mandated solutions across QBE.
- Conduct risk assessments of identified applications, platforms and services.
- Evaluate technology solutions against control requirements and governance frameworks.
- Review supporting documentation, authoritative sources and operational processes to assess risk exposure.
- Identify, document and communicate identified technology risks, control gaps and remediation recommendations.
- Support the maintenance of Shadow IT inventories and associated risk registers.
- Track remediation activities throughout the lifecycle to ensure status is updated along the way and identified applications, platforms and services are moved to appropriate state.
- Support the development, implementation and maintenance of QBE's Shadow IT governance framework, processes and standards.
- Monitor compliance with governance requirements and minimum control standards.
- Coordinate periodic reviews and re-assessments of identified solutions to ensure ongoing compliance.
- Assist in providing information needed to document policy exceptions, risk acceptances and governance approvals.
- Support governance forums by preparing reporting, metrics and risk summaries.
- Track and report on remediation activities and governance outcomes.
- Contribute to the development and maintenance of governance documentation, standards and operating procedures.
- Partner with business and IT stakeholders to understand technology usage and support risk-informed decision making.
- Provide guidance on Business-Managed IT and 3rd Party-Mandated governance requirements, risk management expectations and security controls.
- Support business teams through onboarding, review and governance approval processes.
- Collaborate with Technology, Cyber Security, Risk, Privacy, Compliance and Procurement teams to address identified risks and control gaps.
- Assist in raising awareness of Shadow IT risks and governance requirements across the organisation.
- Support workshops, assessments and stakeholder engagement activities relating to Shadow IT governance.
- Maintain governance dashboards, inventories and reporting related to Shadow IT, Business-Managed IT and 3rd Party-Mandated technology risks.
- Analyse trends, emerging risks and recurring governance issues to identify improvement opportunities.
- Prepare reports, presentations and risk summaries for governance committees and leadership stakeholders.
- Monitor key risk indicators, compliance metrics and management actions.
- Support internal audit, regulatory and assurance activities relating to Shadow IT governance processes.
- Contribute to the ongoing enhancement of QBE's Shadow IT governance capability, processes and tooling.
- Identify opportunities to improve governance efficiency, automation and user experience.
- Assist with the development of guidance materials, training content and awareness initiatives.
- Support process reviews to ensure governance frameworks remain effective, scalable and aligned to business needs.
- Monitor industry trends, regulatory developments and emerging risks associated with business-managed technology solutions.
- Contribute to initiatives that strengthen cyber risk management, technology governance and operational resilience.
- Experience in Cyber Security, Information Security, Technology Risk, IT Governance, Operational Risk or a related discipline.
- Experience supporting risk assessments, governance activities or compliance programs.
- Understanding of cybersecurity risk management principles and governance practices.
- Knowledge of information security frameworks and standards such as ISO 27001, NIST CSF, COBIT or related frameworks.
- Ability to assess risk and translate technical concepts into clear business outcomes.
- Strong analytical and problem-solving skills with excellent attention to detail.
- Ability to manage multiple activities and priorities in a structured and organized manner.
- Strong written and verbal communication skills.
- Effective stakeholder engagement skills and the ability to work collaboratively across business and technology teams.
- Experience preparing reports, metrics, governance documentation and risk summaries.
- A proactive mindset with a strong focus on continuous improvement.
- A collaborative and customer-focused approach to delivering outcomes.
- Degree in Cyber Security, Information Technology, Risk Management, Business, Governance or a related discipline.
- Professional certifications such as Security+, CISA, CRISC, CGRC, COBIT Foundation, ISO 27001 Foundation or equivalent.
- Experience working within regulated industries such as insurance, financial services or banking.
- Experience supporting technology governance, Shadow IT, SaaS governance, operational risk or compliance programs.
- Experience working with governance, risk and compliance (GRC) platforms, workflow tools or technology inventory solutions.
- Familiarity with cloud technologies, SaaS platforms and modern business application environments.
- Shadow IT discovery and assessment
- Business-Managed IT and 3rd Party-Mandated governance
- Compliance monitoring and reporting
- Risk identification and remediation tracking
- Stakeholder engagement and advisory
- Governance framework development and continuous improvement
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Cyber Security Governance Analyst in Taguig vacancy
- ...purpose of this role is to support transformational change in Cyber and information security risk management within the core business, 3rd party... ...other and to our customers, suppliers, communities and governments. It provides clear guidance to help us to make good judgement...
- ...Professional All Job Posting Locations: Taguig, National Capital Region (Manila), Philippines Job Description Sr. Analyst, Global Data Governance Johnson & Johnson MedTech is currently recruiting for a Senior Analyst for the Global Data Governance. This role...
- ...Job Summary: The Data Governance Analyst (Officer) is responsible for implementing, monitoring, and continuously improving the company's data... ...practices. He/She ensures that company data is accurate, secure, compliant, and consistently defined across systems and business...
- ...Johnson & Johnson MedTech seeks a Senior Analyst for Global Data Governance to oversee concurrent projects supporting the MedTech Run State and deployments. The role involves managing data loads, validation, stakeholder coordination, and ensuring alignment with global...
- KEY RESPONSIBILITIES Encourage customers to utilize new features that will help them drive their business forward Provide insight and relay customer feedback with internal teams, including Sales, Marketing, Product, Technical Support, Operations, Finance and Engineering...
- ...: Cybersecurity Engineer, Infrastructure Security At EY, we’re all in to shape your future... ...reporting, and platform integrations. Govern the end-to-end email service lifecycle,... ...business email compromise (BEC), and emerging cyber threats. Oversee email authentication,...
- ...Cyber Defence - Global Security Operations Centre (GSOC) Level 2 Analyst ~202604110 ~Taguig, Metro Manila, Philippines ~Full time Description As part of the Cyber Defence team in the Global Security Operations Centre, you will provide security monitoring...
- ...Role Purpose The Project Risk & Governance Analyst supports the organisation’s risk management and governance framework by ensuring risks, issues, actions, decisions, and dependencies are effectively identified, documented, tracked, and reported through established...
- ...Description / Requirements Job Title: Information Security Analyst - Global Risk, Compliance & BCP Location: Taguig City Work set up: Hybrid Salary: PHP 70,000-75,000 Work schedule: Mid shift The Information Security Analyst is responsible for protecting...
- ...experienced professionals to join us in Taguig with the role of Cyber Fraud Investigations Head. In this role, you will lead the... ..., vulnerability assessment, penetration testing, or related security disciplines is preferred. Proven experience in cybercrime...
- ...We are seeking a skilled Information Security Analyst to help safeguard our organization’s systems, networks, and data. In this role, you... ...environment Support Security Business Partners in delivering governance, risk, and compliance initiatives. Conduct risk...
- ...Shape your Career with Citi We’re currently looking for a high caliber professional to join our team as SVP, Governance and Controls Senior Lead Analyst – End User Computing (EUC) - Hybrid (Internal Job Title: Data Governance Foundation Sr Lead Analyst - C14). Being...
- ...a better working world for all. Job Title: GDS Cyber Alliances Operations Lead Analyst Job Span: All Cyber Alliances Function: GDS ES Growth... ..., executive-ready reporting, partner enablement, governance, and stakeholder engagement from the GDS Alliances Partner...
775000 $ per day
Advise clients on their business protection journey by shaping security strategy, designing solutions, and providing guidance to strengthen cyber resilience. Summary: As a Security Consulting Practitioner, a typical day involves engaging with clients to understand...- ...Develop and implement strategies to influence policy in favor of the organization. • Build and maintain relationships with key government officials and stakeholders. • Prepare and deliver presentations, reports, and other communications to internal and external audiences...
- ...SAP Master Data Governance (MDG) Lead Location: Taguig (3 days/week onsite) Work Schedule: EMEA / Mid-shift Category: ERP / CRM / Tools Salary: PHP 120,000 Experience Required: 5+ years Job Summary The SAP Master Data Governance (MDG) Lead will...
- ...will take us, and your progression, to the next level. As a SECURITY ENGINEERING TECHNICAL LEAD , you will be responsible for... ...implementing and maintaining the technical security controls that our Cyber Team rely upon to protect Inchcape. This will include working...
775000 $ per day
...to demonstrate capabilities Here’s what you’ll need: You should have solid experience in the Master Data Management or Governance area from working in consultancies and/or other industries. You will be expected to be passionate and positive about the opportunity...- ...with data management teams. ~ Strong understanding of data governance and data management principles and processes. ~ Experience with... ...for assigned business units. Establish and enforce data security and data privacy compliance procedures in accordance with regulatory...
- ...Monitor and patrol premises to prevent theft, violence, and other incidents. Conduct regular security checks and inspections. Regulate access to facilities and maintain order. Report safety hazards, suspicious activities, or emergencies promptly. Assist visitors...
- ...Job Title: Bouncer / Security Personnel Location: BGC, Taguig – Simulation Golf Facility Job Summary: The Bouncer is responsible for ensuring the safety, order, and security of the Simulation Golf facility in BGC, Taguig. This includes monitoring entry and exit...
- ...highly collaborative and supportive team of diverse and talented colleagues. Our Cybersecurity platform is looking for a Senior Security Engineer , in this you will implement, optimize, and maintain security technologies that protect our business while collaborating...
- ...accurate reports of all incidents and activities. Provide assistance to guests and employees as necessary to ensure safety and security. Requirements Educational Qualifications: High School Diploma or equivalent. Experience Level: 0–2 years of experience in...
- ...Patrol assigned areas to maintain safety and security. Monitor surveillance equipment and report any suspicious activities. Provide assistance and guidance to visitors and employees. Respond promptly to alarms and emergencies, reporting incidents to management...
- ...based role with frequent visits to LGUs, city/municipal halls, and government agencies Role Overview We are looking for a Permits &... ...with Operations, Engineering, Admin, and Finance teams to secure signatures, technical documents, site plans, payment processing...
- ...Security Managed Services Practitioner Manila onsite Shifting schedule Join a global team and play a key role in protecting enterprise systems and data from cyber threats. We are looking for a security professional with strong experience in SIEM and cybersecurity...
- ...for a Level 2 Vulnerability Management Analyst to be responsible for delivering the organization... ...This role leverages ASM, Web Application Security Testing, CSPM, and automated penetration... ...tools to identify, assess, and reduce cyber risk. What You'll Do Manage and...
- ...The ideal candidate is a hands-on security expert with strong technical depth, customer- facing experience, and a proven track record... ...critical thinking and problem-solving skills and a passion for cyber security. Sound fundamental knowledge on IP networking (e.g....
- ...to business needs. The Business Systems Analyst will contribute to system improvements,... ...business systems. Ensure data integrity, security, and compliance across systems.... ...Effective adherence to ITIL processes and governance standards. WHAT TO EXPECT We offer...
- ...Are you passionate about Officer - Government Affairs and its' processes? If so, this opportunity could be for you! Join us at B. Braun, a leader in the medical devices industry, where your skills and experience will be recognized and celebrated. Take the next step...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Security Governance Analyst. Be the first to apply!
