Cybersecurity & Compliance Advisor

Sourcefit; Philippines; On-site; PHP 400,000 - 700,000; Full time

Job summary

Sourcefit is seeking a Cybersecurity & Compliance Consultant to support client engagements in SOC 2, ISMS, privacy, and PCI DSS across on-site client sites in the Philippines. You will assist with assessments, gap analyses, evidence gathering, and remediation tracking, coordinating with auditors and cross-functional teams.

The ideal candidate has 6 months to 2 years in cybersecurity or GRC, exposure to SOC 2/PCI DSS/NIST, and strong documentation and communication skills.

Qualifications

• Bachelor's degree in CS/IT/IS or related field.
• 6 months to 2 years experience in cybersecurity, IT audit, or GRC.
• Exposure to SOC 2, PCI DSS, ISO 27001, or NIST.
• Hands-on cybersecurity, risk management, and compliance concepts.
• Certifications such as CISA or ISO 27001 preferred but not required.

Responsibilities

• Support SOC 2 Type 1 and Type 2 assessments, including scoping, documentation, evidence gathering and audit readiness.
• Assist ISMS assessments and audits, including documentation reviews and tracking action items.
• Support privacy assessments (PIA/DPIA), gap assessments, and remediation tracking.
• Assess compliance with privacy regulations and frameworks (GDPR, CCPA, local laws).
• Support PCI DSS assessments and gap analyses with evidence gathering and review.
• Coordinate with clients, auditors, legal, technology, and business teams to collect information.
• Prepare assessment documentation, reports, trackers, and other compliance deliverables.
• Assist remediation activities and follow up on open findings.
• Participate in client meetings to explain requirements and findings.
• Stay updated on cybersecurity, compliance, and privacy best practices.

Skills

Cybersecurity basics

GRC

Audit support

Documentation

Client coordination

Communication

Education

Bachelor's degree in Computer Science/Information Technology/Information Systems

Job description

Sourcefit is seeking a Cybersecurity & Compliance Consultant to support client engagements in SOC 2, ISMS, privacy, and PCI DSS across on-site client sites in the Philippines. You will assist with assessments, gap analyses, evidence gathering, and remediation tracking, coordinating with auditors and cross-functional teams.

The ideal candidate has 6 months to 2 years in cybersecurity or GRC, exposure to SOC 2/PCI DSS/NIST, and strong documentation and communication skills.