Cybersecurity Consultant (Risk & Security Assessment)

HRTX; Philippines; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

HRTX in the Philippines is seeking a Cybersecurity Consultant (Risk & Security Assessment) to perform security and risk assessments and provide actionable mitigations for identified risks.

The role requires 3+ years in IT, 2–3 years in security assessments (cloud, ISMS/NIST, SOC 2 Type 2), and experience with data privacy (PDPA, GDPR). You will engage with stakeholders, present findings to client teams, and lead security training and awareness sessions.

Qualifications

• More than 3 years in IT.
• 2–3 years in security assessments (Cloud Security, ISMS/NIST, SOC 2 Type 2, RCSA, Configuration Review, Architecture Review, Controls Review).
• Has facilitated at least one IT Risk Assessment project.
• Working knowledge of Data Privacy (PDPA, GDPR, DPA 2012) and Security Awareness.
• At least 1 year in consulting/advisory engagements (preferred).
• Strong knowledge in IT Audit/Assessments and/or Maturity Assessments.
• Strong knowledge of ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP.

Responsibilities

• Performs security and/or risk assessments and provide timely and practical recommendations to mitigate the identified risks.
• Performs security and/or risk assessments aligned with industry standards (ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP, CSA CCM), regulatory requirements (BSP circulars and others), and best practices.
• Performs maturity assessments in cyber security and information technology.
• Participates in discovery workshops with other consultants and key stakeholders, both in IT and other business units.
• Participate in project presentation for client project team and other key stakeholders.
• Facilitate Security Training and Awareness.

Skills

Security assessments

Maturity assessments

IT risk assessment

Cloud security

Data privacy

Security training

IT audit/assessments

Consulting

Time management

Customer service

Job description

Cybersecurity Consultant (Risk & Security Assessment)

Job Openings Cybersecurity Consultant (Risk & Security Assessment)

About the job Cybersecurity Consultant (Risk & Security Assessment)

Job Responsibilities:

• Performs security and/or risk assessments and provide timely and practical recommendations to mitigate the identified risks
• Performs security and/or risk assessments aligned with industry standards (ISO 27001/2, NIST, CIS, PCIDSS, SWIFT CSP, CSA CCM), regulatory requirements (BSP circulars and others), and best practices
• Performs maturity assessments in cyber security and information technology
• Participates in discovery workshops with other consultants and key stakeholders, both in IT and other business units
• Participate in project presentation for client project team and other key stakeholders
• Facilitate Security Training and Awareness

Qualifications:

• Has more than 3 years of experience in Information Technology
• At least2-3 years of experience in security assessments (Cloud Security Assessment, Third Party Security Risk Assessments, ISMS/NIST Assessment, SOC 2 Type 2 Assessment, RCSA, Configuration Review, Architecture Review, Controls Review) (Mandatory)
• Mus havefacilitated at least one (1) IT Risk Assessment project
• Working experience in Data Privacy (PDPA, GDPR, DPA of 2012), andSecurity Awareness and Training
• At least 1 year of experience in consulting/advisory engagements (preferred)
• Strong knowledge in IT Audit/Assessments and/or Maturity Assessments
• Strong knowledge on information security standards and guidelines such ISO 27001/2, NIST, CIS, PCI DSS and SWIFT CSP
• Understanding of local regulations (BSP circulars)
• Understanding of Cloud Compute, Storage, Security and Virtualization best practice
• Good in technical writing and infographic reporting
• Strong time management skills which allow for multi-tasking while managing shifting priorities
• Proven history of providing exemplary customer service to both internal and external stakeholders
• Preferably has at least one of the following certifications:
  • ISC2 CISSP
  • ISMS LA/LI
  • ISACA CISA or CRISC
  • Relevant certifications for PCI DSS, SWIF, HITRUST and other industry security standards/guidelines