Cybersecurity & Compliance Specialist

Sourcefit Philippines, Inc.; Philippines; On-site; PHP 360,000 - 600,000; Full time

Job summary

Sourcefit Philippines, Inc. is seeking a Cybersecurity & Compliance Consultant to support client engagements across SOC 2, ISMS, Data Privacy, and PCI DSS. The role includes assessments, gap analysis, control documentation, evidence gathering and audit readiness.

The ideal candidate has foundational knowledge in cybersecurity, IT audit, GRC, or compliance frameworks and is comfortable working with clients and cross-functional teams to support engagements. On-site in Bridgetowne, QC.

Qualifications

• Foundational knowledge in cybersecurity, IT audit, GRC, or compliance frameworks.
• Experience with governance, risk, controls, audit support, compliance documentation, or evidence gathering.
• Exposure to at least one of SOC 2, PCI DSS, data privacy requirements, ISO 27001, or NIST.

Responsibilities

• Support SOC 2 Type 1 and Type 2 assessments including scoping, documentation, evidence gathering, and audit readiness.
• Assist ISMS assessments and audits with documentation, control reviews, evidence collection, and action-item tracking.
• Support privacy assessments (PIAs, DPIAs), gap assessments, and remediation tracking.
• Assist in evaluating privacy regulations and frameworks (GDPR, CCPA, local privacy laws).
• Support PCI DSS assessments and gap analyses, including evidence gathering and documentation review.
• Coordinate with clients, auditors, legal, IT, and business teams to collect information and evidence.

Skills

Cybersecurity fundamentals

GRC knowledge

Client communication

Documentation

Education

Bachelor's degree in Computer Science/Information Technology/Information Systems

Tools

SOC 2

PCI DSS

ISMS

ISO 27001

Job description

Sourcefit Philippines, Inc. is seeking a Cybersecurity & Compliance Consultant to support client engagements across SOC 2, ISMS, Data Privacy, and PCI DSS. The role includes assessments, gap analysis, control documentation, evidence gathering and audit readiness.

The ideal candidate has foundational knowledge in cybersecurity, IT audit, GRC, or compliance frameworks and is comfortable working with clients and cross-functional teams to support engagements. On-site in Bridgetowne, QC.