Cybersecurity Associate Consultant - Onsite (A-ACY)

Sourcefit Philippines Inc.; Quezon City; On-site; PHP 334,800 - 558,000; Full time

Job summary

A cybersecurity consulting firm based in Quezon City is seeking a Cybersecurity Associate Consultant to support clients by conducting assessments and implementing security frameworks. The ideal candidate will have a Bachelor’s degree in Cybersecurity or a related field, and at least one year of experience in cybersecurity. Responsibilities include developing tailored strategies, conducting assessments, and collaborating with clients to enhance their cybersecurity posture. This position is onsite and requires strong analytical skills and effective communication abilities.

Qualifications

• At least 1 year of experience in cybersecurity or IT roles.
• Experience or familiarity with cybersecurity/compliance frameworks.
• Foundational knowledge of GDPR, HIPAA, and SOC 2.

Responsibilities

• Conduct end-to-end cybersecurity assessments.
• Develop and implement tailored cybersecurity strategies.
• Collaborate with clients to create or update incident response plans.

Skills

Cybersecurity principles

Analytical skills

Problem-solving skills

Client relationship management

Effective communication

Education

Bachelor’s degree in Cybersecurity, Information Technology, or related field

Tools

Vulnerability assessment tools

Firewalls

Microsoft Office Suite

Job description

Position Summary

The Cybersecurity Associate Consultant will support clients by conducting assessments, implementing security frameworks, and advising on risk mitigation strategies across GRC domains. The role requires strong foundational cybersecurity knowledge and familiarity with standards such as SOC 2, ISO, GDPR, HIPAA, and PCI. The position involves hands‑on assessment work, documentation, client coordination, and contributing to compliance and security program development.

Job Details

Work Setup: Onsite | Bridgetowne, Quezon City

Schedule: 9 AM to 6 PM (may adjust based on client needs)

Holidays: Will follow Philippine holidays

Responsibilities

• Conduct end-to-end cybersecurity assessments to identify vulnerabilities, weaknesses, and threats across client environments.
• Develop and implement tailored cybersecurity strategies aligned with industry standards and regulatory requirements.
• Review penetration testing and vulnerability assessment reports, performing associated risk assessments and recommending corrective actions.
• Assist in selecting and deploying security tools such as firewalls, IDS/IPS, antivirus solutions, and other protective technologies.
• Support implementation efforts for frameworks and standards such as SOC 2, ISO, PCI, GDPR, HIPAA, and others.
• Participate in cybersecurity audits and compliance assessments to ensure adherence to required controls.
• Collaborate with clients in creating or updating cybersecurity policies, incident response plans, and disaster recovery plans.
• Provide cybersecurity advisory services and act as a trusted consultant on security matters.
• Deliver presentations, reports, and executive summaries with clear technical and non-technical insights.
• Offer cybersecurity training and awareness programs to strengthen client knowledge and preparedness.
• Coordinate closely with client IT and security teams to ensure the successful execution of cybersecurity initiatives.
• Stay informed on emerging cybersecurity threats, trends, and best practices.
• Provide proactive recommendations and guidance to enhance clients’ security posture.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• At least 1 year of experience in cybersecurity or IT roles with exposure to security-related work.
• Strong interest in cybersecurity and a commitment to ongoing learning.
• Experience or familiarity with at least one cybersecurity or compliance framework (e.g., PCI-DSS, ISO 27001).
• Foundational knowledge of cybersecurity principles, best practices, and regulatory standards such as GDPR, HIPAA, NIST, ISO 27701, SOC 2, and CIS.
• Understanding of network security, firewalls, IDS/IPS, vulnerability assessment tools, and core cybersecurity technologies.
• Experience with cloud security, endpoint protection, or mobile security is an advantage.
• Strong analytical and problem‑solving skills.
• Effective written and verbal communication skills.
• Ability to build strong client relationships and work collaboratively with cross‑functional teams.
• High ethical standards and strong commitment to confidentiality.
• Proficiency in Microsoft Office Suite.