Consultant - Risk & Security Assessments (Lead Level)

Nexus Recruitment Group; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Nexus Recruitment Group is seeking a skilled Risk & Security Consultant (Lead Level) to oversee information security assessments across enterprise environments in the Philippines. You will identify risks, evaluate controls, and deliver actionable remediation plans while mentoring junior staff.

The role emphasizes collaboration with IT, legal, and business stakeholders, producing clear reports and dashboards, and maintaining up-to-date knowledge of threat landscapes and regulatory changes.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or related field.
• 4-7 years of experience in information security, IT audit, or risk management roles.
• Strong knowledge of risk and control frameworks such as ISO 27001, NIST, SOC 2, PCI-DSS, or similar.
• Experience in performing or leading security assessments, audits, or third-party risk reviews.
• Familiarity with governance, risk, and compliance (GRC) tools is an advantage.
• Excellent written and verbal communication skills with the ability to present technical findings to non-technical audiences.
• Detail-oriented and highly organized, with the ability to manage multiple assessments simultaneously.

Responsibilities

• Conduct risk and security assessments across applications, infrastructure, third-party vendors, and internal controls.
• Evaluate and document risk exposure, security posture, and compliance against established frameworks (e.g., ISO 27001, NIST, CIS, COBIT).
• Prepare detailed assessment reports, including identified risks, control gaps, and actionable recommendations.
• Support the development and implementation of risk mitigation strategies and remediation plans.
• Collaborate with cross-functional teams including IT, legal, compliance, and business stakeholders to understand and align security requirements.
• Lead or contribute to the planning and execution of security assessments, audits, and readiness reviews.
• Stay up to date with current threat landscapes, emerging risks, and relevant regulatory changes.
• Support the preparation of risk dashboards and management reports.

Skills

Risk assessment

Information security

IT audit

GRC governance

Communication

Education

Bachelor's degree in Information Security / Computer Science

Tools

GRC tools

ISO 27001

Job description

Consultant - Risk & Security Assessments (Lead Level)

Job Openings Consultant - Risk & Security Assessments (Lead Level)

About the job Consultant - Risk & Security Assessments (Lead Level)

Job Summary:

We are seeking a detail-oriented and analytical Risk & Security Consultant to support and lead information security assessments across enterprise environments. This role will focus on identifying, evaluating, and mitigating security risks through structured assessments and consulting engagements. Depending on experience, this position can be scoped as Junior Lead Consultant or Lead Consultant, with increasing responsibility over project delivery, client engagement, and team mentoring.

The ideal candidate will bring a solid foundation in IT risk, cybersecurity frameworks, and control evaluation, along with strong interpersonal and documentation skills.

Key Responsibilities:

• Conduct risk and security assessments across applications, infrastructure, third-party vendors, and internal controls.
• Evaluate and document risk exposure, security posture, and compliance against established frameworks (e.g., ISO 27001, NIST, CIS, COBIT).
• Prepare detailed assessment reports, including identified risks, control gaps, and actionable recommendations.
• Support the development and implementation of risk mitigation strategies and remediation plans.
• Collaborate with cross-functional teams including IT, legal, compliance, and business stakeholders to understand and align security requirements.
• Lead or contribute to the planning and execution of security assessments, audits, and readiness reviews.
• Stay up to date with current threat landscapes, emerging risks, and relevant regulatory changes.
• Support the preparation of risk dashboards and management reports.

Qualifications:

• Bachelors degree in Information Security, Computer Science, Information Systems, or a related field.
• 4-7 years of experience in information security, IT audit, or risk management roles.
• Strong knowledge of risk and control frameworks such as ISO 27001, NIST, SOC 2, PCI-DSS, or similar.
• Experience in performing or leading security assessments, audits, or third-party risk reviews.
• Familiarity with governance, risk, and compliance (GRC) tools is an advantage.
• Excellent written and verbal communication skills with the ability to present technical findings to non-technical audiences.
• Detail-oriented and highly organized, with the ability to manage multiple assessments simultaneously.

Preferred Certifications:

• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• CompTIA Security+ or equivalent foundational cert