Security Analyst II

Security Analyst II - IT Audit, Risk & Compliance Company: Essilor International Location: Alabang, Muntinlupa City, Philippines Employment Type: Regular, Full-Time About the Role We are looking for a Security Analyst II to support the organization's global information security initiatives through security audits, risk assessments, compliance monitoring, and operational security support. In this role, you will work closely with business units, project teams, and IT stakeholders to evaluate security controls, identify potential risks, ensure compliance with established security standards, and recommend improvements to strengthen the organization's security posture. The ideal candidate has a strong understanding of information security frameworks, security auditing methodologies, risk management, and operational security, along with excellent analytical, documentation, and communication skills. Key Responsibilities Plan, conduct, and lead information security audits across business units, systems, applications, and IT environments. Assess access controls, financial and information systems, operational procedures, and security safeguards. Evaluate the effectiveness of security controls and verify compliance with corporate policies, industry standards, and applicable regulatory requirements. Conduct security risk assessments and identify vulnerabilities, control gaps, and potential exposures. Prepare clear and comprehensive audit reports, document findings, and recommend corrective and preventive actions. Develop and recommend security best practices to improve information security governance, risk management, and compliance. Collaborate with management, IT teams, and business stakeholders to implement security recommendations and address identified risks. Support security monitoring, documentation, research, and continuous improvement initiatives. Contribute to security awareness, access control, risk management, and security operations activities. Participate in project deployments involving Business Continuity Planning (BCP) and Disaster Recovery (DR), as needed. Facilitate meetings, coordinate with stakeholders, and communicate security requirements and findings effectively. Work on a mid-shift schedule and be willing to travel occasionally when required. Qualifications and Requirements Experience in information security, IT security, security auditing, risk management, or a related field. Practical knowledge of information security frameworks and assessment methodologies, particularly ISO 27001, PCI DSS, and NIST . Experience evaluating security controls, conducting risk assessments, documenting audit findings, and developing remediation recommendations. Familiarity with security solutions, risk assessment methodologies, and security monitoring tools. Knowledge of at least four information security domains: Access Control Security Awareness Risk Management Security Operations Proficiency in Microsoft Excel, including formulas and data analysis. Familiarity with API integration and automation. Strong written and verbal English communication skills. Excellent analytical, organizational, and problem-solving abilities. Ability to work independently and collaboratively with technical and non-technical stakeholders. Willingness to work a mid-shift schedule and travel occasionally, as required. Preferred Qualifications Relevant certifications such as CompTIA Security+, PCI Internal Security Assessor (ISA), or Certified Information Systems Auditor (CISA). Experience working in an international or multinational organization. Experience coordinating team meetings, audit activities, and documentation requirements. Exposure to Business Continuity Planning (BCP), Disaster Recovery (DR), or project deployment initiatives. Familiarity with CMMI, HDA, and Microsoft Office 365. What We're Looking For We are seeking a detail-oriented, self-motivated, and adaptable professional with a strong commitment to information security and continuous learning. The successful candidate should demonstrate integrity, initiative, teamwork, customer service orientation, and the ability to communicate complex security matters clearly while balancing business requirements. Interested candidates are encouraged to apply!