Cybersecurity Risk & Assurance Consultant

HRTX; Philippines; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

HRTX in the Philippines is seeking a Cybersecurity Consultant (Risk & Security Assessment) to perform security and risk assessments and provide actionable mitigations for identified risks.

The role requires 3+ years in IT, 2–3 years in security assessments (cloud, ISMS/NIST, SOC 2 Type 2), and experience with data privacy (PDPA, GDPR). You will engage with stakeholders, present findings to client teams, and lead security training and awareness sessions.

Qualifications

• More than 3 years in IT.
• 2–3 years in security assessments (Cloud Security, ISMS/NIST, SOC 2 Type 2, RCSA, Configuration Review, Architecture Review, Controls Review).
• Has facilitated at least one IT Risk Assessment project.
• Working knowledge of Data Privacy (PDPA, GDPR, DPA 2012) and Security Awareness.
• At least 1 year in consulting/advisory engagements (preferred).
• Strong knowledge in IT Audit/Assessments and/or Maturity Assessments.
• Strong knowledge of ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP.

Responsibilities

• Performs security and/or risk assessments and provide timely and practical recommendations to mitigate the identified risks.
• Performs security and/or risk assessments aligned with industry standards (ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP, CSA CCM), regulatory requirements (BSP circulars and others), and best practices.
• Performs maturity assessments in cyber security and information technology.
• Participates in discovery workshops with other consultants and key stakeholders, both in IT and other business units.
• Participate in project presentation for client project team and other key stakeholders.
• Facilitate Security Training and Awareness.

Skills

Security assessments

Maturity assessments

IT risk assessment

Cloud security

Data privacy

Security training

IT audit/assessments

Consulting

Time management

Customer service

Job description

HRTX in the Philippines is seeking a Cybersecurity Consultant (Risk & Security Assessment) to perform security and risk assessments and provide actionable mitigations for identified risks.

The role requires 3+ years in IT, 2–3 years in security assessments (cloud, ISMS/NIST, SOC 2 Type 2), and experience with data privacy (PDPA, GDPR). You will engage with stakeholders, present findings to client teams, and lead security training and awareness sessions.