Asana’s Security Risk and Compliance team is looking for a security risk and compliance operations associate to join our team. You will partner closely with Engineering, Sales, Security, and other cross-functional teams to support our customer trust and security compliance efforts. 

You will support the Security Risk and Compliance team in our customer trust program by assisting sales teams with customer assessments and improving our internal and external documentation. You will interact cross-functionally with sales, solutions engineering, engineering, and with others across the business to deliver high-impact and high-value information to new and prospective customers. 

• Health Insurance/HMO
• Enjoy unlimited MadMax Coffee
• Diverse learning & growth opportunities
• Accessible Cloud HR platform (Sprout)
• Above standard leaves
• 2,000 Internet Allowance

• Support Asana’s Security Risk and Compliance team with Customer trust efforts, including answering customer security questions and completing security questionnaires in an accurate and timely manner
• Communicate with Asana’s customer-facing teams to address customer inquiries related to security and privacy
• Maintain Asana’s customer trust knowledge base with up to date information and responses to frequently asked security and compliance questions
• Update Asana’s security and compliance documentation with updated product features and program enhancements
• Proactively identify areas of potential improvement to Asana’s customer trust documentation ensuring clarity, accuracy, and relevance
• Assist with performing regular reviews of industry standard security questionnaires (e.g. CAIQ, SIG, VSA) to ensure alignment with Asana’s security programs

• 5+ years of experience in an information security and/or customer trust facing role for a technology company
• BA/BS in relevant field or equivalent work experience in information security, customer trust
• Strong preference for relevant Information Security Certification(s) (CISSP, CISA, CISM, CRISC, CCSK, ISC(2), ISACA, SANS GIAC, ISO Accredited Auditor)
• Experience reviewing and completing security and compliance questionnaires, including custom questionnaires as well as industry-standard questionnaires (e.g. SIG, CAIQ, HECVAT, VSA)
• Familiarity with security and privacy compliance programs such as SOC 2, ISO 27001/17/18, CSA STAR, GDPR, FedRAMP, NIST, etc.
• Knowledge of third-party risk management and/or procurement processes
• Ability to understand and communicate internal processes to stakeholders
• Experience managing a security and privacy training program at a technology company
• Excellent interpersonal and communication skills and the ability to form relationships with internal and external teams
• Familiarity with security compliance automation programs for third party due diligence such as OneTrust, ServiceNow, Venminder, Archer
• Experience with enterprise SaaS applications, cloud infrastructure, modern software engineering practices and tools, databases, operating systems, secure network design, and public cloud models such as AWS
• Ability to multitask, prioritize, and organize efficiently with minimal daily supervision
• You are a detail-oriented problem solver and a forward thinker
• Excellent written and verbal communication skills with the ability to convey security concepts clearly, effectively, and accurately

• Scanned copy of valid NBI Clearance
• Accomplished Medical or PEME Slip (covered by KMC)
• 2x2 & Half body picture with white background
• Proof of government numbers (TIN, SSS, Pag-ibig, & Philhealth)
• Photocopy of 2 valid IDs – front & back (government-issued)
• Clear copy of your Birth Certificate (PSA or NSO)
• Accomplished HR Forms & Promissory Note (will be provided by KMC’s Onboarding Team

If you're a rockstar at what you do and looking to be a part of our amazing story, we want to hear from you!

We offer attractive salaries and benefits plus you get to work in some of the Philippines' best flexible workspaces. Our employees also get to enjoy exclusive discounts, rewards and freebies, and invites to our monthly events. We are always recruiting for roles in IT & Development, Marketing, Business Administration, HR & Recruitment and Legal & Finance Roles.

KMC provides quality employment opportunities for job-seekers looking for a career that is both challenging and fulfilling. We are also committed to providing equal opportunities at every selection stage. We do not discriminate due to age, gender, sexual orientation, ethnicity, nationality, and religion.

KMC Solutions offers a variety of career opportunities in Metro Manila, Cebu and Clark & Iloilo. We are always looking for talented and enthusiastic individuals who are ready to make their next big career move.

At KMC, we foster an inclusive and positive workplace for all. We push our members to succeed in everything they do through our collaborative work environment. We encourage our community to work hard and reach their full potential while delivering results that matter for our members and you as professionals.

We host amazing and quality events and implement people-centric policies to work flexibly. We ensure that everyone in our expansive network is engaged, from our internal employees and those who work on behalf our offshore partners.

At KMC, we work hard and we are committed to putting our best foot forward in everything we do. Everyone is encouraged to be an individual while also working for the collective good of the KMC Community. We believe mistakes are opportunities and that you should not present a solution without a problem.

We also know when hard work deserves to be recognized so we reward our employees with monthly parties, free trips and much much more!