Job Description:Security Assurance:
- Conduct regular security assessments, including vulnerability scans, penetration tests, and risk assessments to identify and mitigate security risks.
- Develop, implement, and maintain security policies, procedures, and controls to ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, NIST, ISO 27001).
- Perform security reviews and audits of internal and third-party systems to ensure adherence to security best practices.
Security Engineering:
- Ensure to implement security solutions and technologies to protect against cyber threats and vulnerabilities.
- Collaborate with IT and development teams to integrate security into system design, application development, and deployment processes.
- Investigate and respond to security incidents, including conducting forensic analysis and coordinating with incident response teams.
Compliance and Risk Management:
- Stay current with emerging security threats, technologies, and industry trends to continuously improve security posture.
- Support and preparation and submission of compliance reports and documentation for audits.
Reporting:
- Generate and present regular security reports and metrics to senior management, highlighting key security events, trends, and the effectiveness of security measures.
- Document security incidents, including the nature of the threat, response actions, and outcomes.
- Prepare and submit compliance reports and documentation for audits, ensuring accurate and timely reporting of security posture and incidents.
Collaboration and Communication:
- Work closely with cross-functional teams to address security-related issues and implement effective solutions.
- Provide expert guidance and recommendations on security matters to senior management and other stakeholders.
- Document and communicate security findings, recommendations, and status to relevant parties.
Requirements
Qualifications:
- Minimum of 5 years of experience in IT security, information assurance, or a related field.
- Strong understanding of security frameworks and standards such as ISO 27001, NIST, GDPR, and HIPAA.
- Hands-on experience with security assessments, including vulnerability scanning, penetration testing, and risk assessments.
- Solid background in security engineering, with the ability to implement security tools, technologies, and solutions.
- Proficient in conducting security audits and reviews of internal and third-party systems.
- Experience working with cross-functional teams to integrate security into software development and IT operations.
- Strong knowledge of incident response procedures, forensic analysis, and mitigation strategies.
- Familiarity with compliance reporting and audit preparation.
- Excellent report writing and communication skills, with the ability to present findings and metrics to senior management.
- Up-to-date with emerging threats, technologies, and best practices in cybersecurity.
- Strong analytical and planning skills;
- Good communication and presentation skills;
- Excellent problem-solving skills;
- Amenable to work in Ortigas (fully onsite)