Cyber Security Risk Assessment Specialist

Smart Communications, Inc.; Makati; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

Smart Communications, Inc. in Makati, Metro Manila is seeking a Cyber Security Risk Assessment Specialist within the Cyber Security Operations Group (CSOG).

You will review architecture diagrams, hunt for security gaps, and shape risk evaluation before major projects launch. You’ll work with engineering and project teams, build risk treatment plans that get implemented, and grow expertise across on‑premise and cloud environments, on a technical/specialist career track built for depth.

Qualifications

• Bachelor's degree in IT/CS/Engineering required.
• 3-5 years in IT, Cybersecurity, Information Security, Risk Management, or related field.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to engage both technical and non-technical stakeholders.

Responsibilities

• Execute risk assessments across multiple concurrent projects against standards and best practices.
• Analyze solution designs, network architecture, and data flow to identify vulnerabilities and needed controls before production.
• Build and track risk treatment plans from findings to mitigation timelines and ensure controls are implemented.
• Run vulnerability scans and drive remediation with project teams.
• Review non-standard access requests (Internet, admin rights, VPN) and issue risk-based recommendations.
• Present risk assessment reports and dashboards and lead checkpoint meetings to keep security requirements on track.
• Guide project teams on cybersecurity requirements and ensure timely delivery within SLAs.

Skills

Analytical thinking

Verbal and written communication

Stakeholder engagement

Problem-solving

Education

Bachelor's degree in Information Technology / Computer Science / Engineering

Job description

Cyber Security Risk Assessment Specialist

Cyber Security Operations Group (CSOG)

About the Role

Before a new app, cloud service, or AI tool goes live across one of the Philippines' largest telco groups, someone has to ask: what could go wrong, and how do we stop it before it reaches production? That's you.

As a Cyber Security Risk Assessment Specialist, you'll review architecture diagrams, hunt for the security gaps other teams miss, and shape how PLDT and Smart evaluate risk before major projects launch. You'll work directly with engineering and project teams, build risk treatment plans that actually get implemented (not just filed), and grow your expertise across on-premise and cloud environments, on a technical/specialist career track built for depth, not just tenure.

We welcome applicants from cybersecurity, IT audit, compliance, or engineering backgrounds who bring curiosity and a security-first mindset, you don't need every box checked on paper to be the right fit for this team.

What You'll Do

• Execute risk assessments across multiple concurrent projects, evaluating new technologies, products, and services against company-approved standards and industry best practices.
• Analyze solution designs, network architecture, and data flow diagrams to identify vulnerabilities and recommend the security controls needed before production deployment.
• Build and track risk treatment plans, from findings and residual risk to mitigation timelines, ensuring required controls are implemented before launch.
• Run vulnerability scans across project-related applications and infrastructure, and drive remediation to closure in coordination with project teams.
• Review non-standard access requests (internet, admin rights, VPN) against cybersecurity policy and issue risk-based recommendations.
• Present risk assessment reports and compliance dashboards, and lead checkpoint meetings to keep security requirements on track across projects.
• Guide project teams on cybersecurity requirements and deliver risk assessments within committed timelines and service-level objectives.

What We're Looking For

Required

• Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field.
• 3-5 years of experience in IT, Cybersecurity, Information Security, Risk Management, or a related discipline.
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to engage both technical and non-technical stakeholders.

Preferred Experience

Experience in one or more of the following:

• Information Security
• Telecommunications Technology
• Information Systems Audit
• Regulatory Compliance

Technical Knowledge

• Cybersecurity concepts and frameworks
• Cloud technologies and security services
• Network and infrastructure security
• Common cyber threats such as malware, DDoS, brute-force attacks, and web application attacks
• Technology architecture and solution reviews

Why Join Us?

• Work on large-scale enterprise and digital transformation initiatives.
• Gain exposure to diverse technologies, platforms, and cloud environments.
• Partner with cybersecurity, infrastructure, application, and business leaders across the organization.
• Play a key role in strengthening security posture before projects reach production.