Jobs · jobstreet_ph

N

Cybersecurity Third-Party Risk Management Consultant

NTT Philippines Solutions Inc. · Makati City, Metro Manila · Posted 22d ago

onsiteContract2-5 yrs₱50,000 – ₱60,000 per month🇵🇭 Philippines
Apply on jobstreet_ph

About the role

As a Cybersecurity Third-Party Risk Management Consultant, you will help organizations identify, assess, and manage risks across their vendor ecosystem. Your role involves conducting security assessments, evaluating cybersecurity risks, and recommending remediation strategies while collaborating with clients and stakeholders.

Full job description (as posted) ↓

Join NTT DATA and take your cybersecurity career to the next level. We are looking for an experienced cybersecurity professional who can help organizations identify, assess, and manage risks across their third-party vendor ecosystem. In this role, you will work closely with clients, business stakeholders, and service providers to conduct security assessments, evaluate cybersecurity and data privacy risks, recommend practical remediation strategies, and support the delivery of high-quality risk management engagements. If you have a strong background in Third-Party Risk Management, IT Audit, Information Security, or Cybersecurity Assessments , this is an opportunity to apply your expertise in a collaborative, client-focused environment. What you'll be doing Deliver Third-Party Risk Management (TPRM) engagements, including security assessments of new and existing vendors and service providers. Review vendor responses, supporting evidence, security documentation, and other materials to identify potential cybersecurity risks. Conduct risk assessments against client IT security, cybersecurity, and data privacy requirements . Assess vendor risks and define appropriate risk ratings, corrective actions, and remediation recommendations. Identify security control gaps and potential risks to client environments. Work directly with clients, business units, and third-party vendors to clarify findings and agree on appropriate remediation actions. Monitor identified risks and remediation activities through closure. Review, develop, and enhance security policies based on client requirements and recognized industry standards. Manage day-to-day engagement activities, deliverables, timelines, and stakeholder reporting. Review the work of junior team members and provide coaching, guidance, and constructive feedback. Build strong working relationships with clients and internal stakeholders. Contribute to team development, knowledge sharing, recruitment, and other people initiatives. What we're looking for 2 to 5 years of relevant experience in cybersecurity, information security assessments, IT audit, IT risk, third-party risk, or related disciplines. Strong knowledge of cybersecurity controls, risk assessment methodologies, and industry-leading security frameworks . Experience conducting Third-Party Vendor/Supplier Risk Assessments and managing identified risks. Client-facing experience with the ability to communicate effectively with business units, vendors, technical teams, and leadership stakeholders. Strong stakeholder and project management skills with the ability to manage multiple activities within established deadlines. Experience leading engagements or workstreams and coaching junior team members. Excellent written and verbal communication skills. Strong analytical skills with the ability to translate security findings into clear and practical recommendations. Proficiency in Microsoft Excel, PowerPoint, and Word . Collaborative mindset with the ability to work effectively both independently and as part of a team. Your cybersecurity knowledge You should have knowledge or experience across several of the following areas: ISO 27001 PCI DSS HIPAA and HITRUST GDPR and CCPA FISMA/FedRAMP COBIT OWASP Top 10 NIST 800-53 Third-Party/Vendor Risk Management Business Continuity and Disaster Recovery Cyber Strategy and Governance Cyber Transformation Cybersecurity reporting and dashboarding Advantageous qualifications Bachelor's or postgraduate qualification in Computer Science, Information Technology, Engineering, Cybersecurity, Business Administration , or a related discipline. Professional certifications such as CISSP, CISA, CISM, CEH, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer are highly regarded. Knowledge or hands-on experience reviewing configurations for firewalls, routers, and other network devices . Understanding of security logging and monitoring, including SIEM platforms . Hands-on experience with a SIEM solution would be an advantage. Why join NTT DATA? At NTT DATA, you'll have the opportunity to work on challenging cybersecurity engagements while collaborating with professionals across different technology and business disciplines. You'll be able to strengthen your expertise in cybersecurity risk, third-party security, governance, compliance, and transformation while contributing to solutions that help organizations operate more securely. If you're ready to grow your cybersecurity career and make an impact through meaningful client engagements, apply today and build your future with NTT DATA.

Read the full posting on jobstreet_ph →

FAQ

Is the Cybersecurity Third-Party Risk Management Consultant role at NTT Philippines Solutions Inc. remote?+

This Cybersecurity Third-Party Risk Management Consultant position is listed as onsite (Makati City, Metro Manila).

What is the salary for the Cybersecurity Third-Party Risk Management Consultant role at NTT Philippines Solutions Inc.?+

The listing states ₱50,000 – ₱60,000 per month.

What seniority level is this Cybersecurity Third-Party Risk Management Consultant role?+

This is a unknown level position.

How do I apply for the Cybersecurity Third-Party Risk Management Consultant role at NTT Philippines Solutions Inc.?+

Use the "Apply on jobstreet_ph" button to open the original posting on jobstreet_ph, where you can submit your application directly to NTT Philippines Solutions Inc..