GRC & InfoSec Analyst for Client Compliance & Risk

Synclature; Hinoba-an; On-site; PHP 400,000 - 900,000; Full time

Job summary

Synclature is seeking an Information Security Analyst to support client engagements by implementing and maintaining information security frameworks based on ISO standards. You will conduct gap analyses, assist in audits, and help tailor security policies to safeguard client data.

You will collaborate with the Information Security Manager to improve resilience and ensure regulatory compliance across client environments.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• Certifications like CISSP, CISM, CISA, or ISO 27001 Lead Auditor/Implementer are a plus.
• Familiarity with IT infrastructure, network security, and security tools (e.g., firewalls, intrusion detection systems).
• Strong communication skills for reporting findings and assisting with client queries.

Responsibilities

• Manage client projects focused on information security and compliance.
• Serve as a key point of contact for clients, ensuring clear communication and understanding of project requirements.
• Conduct gap analyses against standards such as ISO 27001, ISO 27701, ISO 20000, ISO 22301, ISO 9001 and more.
• Document findings and provide actionable recommendations for achieving compliance.
• Assist in drafting and tailoring security policies and procedures, with a focus on data protection, incident management, and regulatory compliance.
• Participate in risk assessments to identify vulnerabilities and recommend appropriate mitigation strategies.
• Support ongoing risk management initiatives to ensure clients’ operational resilience.
• Develop and deliver security awareness and compliance training programs to client teams.
• Coordinate internal and external compliance audits, assisting clients in aligning with relevant standards and regulatory requirements.
• Document audit findings, prepare reports, and suggest corrective actions.
• Maintain and update security documentation to ensure alignment with industry standards and client needs.

Skills

Gap analysis

Audits

Policy drafting

Risk assessment

Communication skills

Education

Bachelor’s degree in Information Security, Computer Science, or a related field

Certifications: CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer

Tools

Firewalls

Intrusion Detection Systems

IT infrastructure familiarity

Job description

Synclature is seeking an Information Security Analyst to support client engagements by implementing and maintaining information security frameworks based on ISO standards. You will conduct gap analyses, assist in audits, and help tailor security policies to safeguard client data.

You will collaborate with the Information Security Manager to improve resilience and ensure regulatory compliance across client environments.