CYBERSECURITY And COMPLIANCE CONSULTANT

Sourcefit; Philippines; On-site; PHP 400,000 - 700,000; Full time

Job summary

Sourcefit is seeking a Cybersecurity & Compliance Consultant to support client engagements in SOC 2, ISMS, privacy, and PCI DSS across on-site client sites in the Philippines. You will assist with assessments, gap analyses, evidence gathering, and remediation tracking, coordinating with auditors and cross-functional teams.

The ideal candidate has 6 months to 2 years in cybersecurity or GRC, exposure to SOC 2/PCI DSS/NIST, and strong documentation and communication skills.

Qualifications

• Bachelor's degree in CS/IT/IS or related field.
• 6 months to 2 years experience in cybersecurity, IT audit, or GRC.
• Exposure to SOC 2, PCI DSS, ISO 27001, or NIST.
• Hands-on cybersecurity, risk management, and compliance concepts.
• Certifications such as CISA or ISO 27001 preferred but not required.

Responsibilities

• Support SOC 2 Type 1 and Type 2 assessments, including scoping, documentation, evidence gathering and audit readiness.
• Assist ISMS assessments and audits, including documentation reviews and tracking action items.
• Support privacy assessments (PIA/DPIA), gap assessments, and remediation tracking.
• Assess compliance with privacy regulations and frameworks (GDPR, CCPA, local laws).
• Support PCI DSS assessments and gap analyses with evidence gathering and review.
• Coordinate with clients, auditors, legal, technology, and business teams to collect information.
• Prepare assessment documentation, reports, trackers, and other compliance deliverables.
• Assist remediation activities and follow up on open findings.
• Participate in client meetings to explain requirements and findings.
• Stay updated on cybersecurity, compliance, and privacy best practices.

Skills

Cybersecurity basics

GRC

Audit support

Documentation

Client coordination

Communication

Education

Bachelor's degree in Computer Science/Information Technology/Information Systems

Job description

Job Description:

Position Summary

Were seeking a Cybersecurity & Compliance Consultant to support client engagements across SOC 2, ISMS, Data Privacy, and PCI DSS. The role will assist with assessments, gap analysis, control documentation, evidence gathering and review, remediation tracking, and audit readiness.

The ideal candidate has foundational knowledge or practical exposure to cybersecurity, IT audit, GRC, or compliance frameworks and is comfortable working with clients and internal teams to support compliance engagements.

Job Details

Work set up: On-site (Bridgetowne, QC)

Schedule: Monday to Friday | 9 AM to 6 PM | Flexible to an extent

Holiday: Will follow PH Holidays

Key Responsibilities

• Support SOC 2 Type 1 and Type 2 assessments, including scoping, control documentation, evidence gathering and review, and audit readiness activities.

• Assist with ISMS assessments and audits, including documentation, control reviews, evidence collection, and tracking of action items.

• Support privacy assessments, including PIAs, DPIAs, gap assessments, documentation reviews, and remediation tracking.

• Assist in assessing compliance with privacy regulations and frameworks such as GDPR, CCPA, and local regulatory privacy requirements.

• Support PCI DSS assessments and gap analyses, including evidence gathering, documentation review, and identification of potential compliance gaps.

• Coordinate with clients, auditors, QSAs, legal, technology, and business teams to collect required information and evidence and track outstanding requirements.

• Prepare assessment documentation, reports, trackers, and other compliance deliverables.

• Support remediation activities and follow up on open findings and action items.

• Participate in client meetings and provide support in explaining compliance requirements and assessment findings.

• Stay updated on relevant cybersecurity, compliance, privacy, and industry best practices.

Qualifications & Skills

• Bachelors degree in Computer Science, Information Technology, Information Systems, or a related technical field preferred.

• 6 months to 2 years of experience in cybersecurity, information security, GRC, IT audit, technology risk, compliance, or a related field, with exposure to governance, risk, controls, audit support, compliance documentation, or evidence gathering.

• Exposure to at least one of the following: SOC 2 Trust Services Criteria, PCI DSS, data privacy requirements, ISO 27001, or NIST.

• Hands On Experience on cybersecurity, risk management, internal controls, and compliance concepts.

• Relevant certifications such as CISA, ISO 27001, Security+, or other cybersecurity/compliance certifications are preferred but not required.

• Strong analytical, documentation, communication, and organizational skills.

• Ability to work effectively with clients and cross-functional teams.

• Willingness to learn and develop expertise in cybersecurity and compliance frameworks.