GRC Security Engineer - Awareness & Phishing Lead

Thrive; Capas; Hybrid; PHP 500,000 - 800,000; Full time

Job summary

Thrive in the Philippines is seeking a Security Engineer to join our Infosec GRC team. You will manage security awareness training campaigns, run phishing tests, and generate IT audit reports while troubleshooting platforms and ensuring client compliance.

This role suits someone transitioning from IT into cybersecurity, with a passion for learning and strong communication skills to explain security concepts to non-technical audiences.

Qualifications

• Strong understanding of networking concepts and operating systems.
• Knowledge of cybersecurity threats and risk management, especially human risk management.
• Ability to communicate technical security concepts to non-technical audiences.
• Strong interest in cybersecurity.
• Demonstrates sound security practices and attention to detail.
• Willingness to learn and grow.

Responsibilities

• Management and execution of security awareness training campaigns
• Management and execution of phishing tests
• Troubleshoot phishing email delivery/interaction issues
• Troubleshoot security tool performance issues, integrations and other platform problems
• Create and maintain documentation for security processes, procedures, and technologies
• Setup and generate IT audit reports
• Audit client setups, ensuring accurate configuration is maintained
• Stay current on security threats, attack techniques, and best practices through training and research
• Perform other duties as required.

Skills

Networking concepts

Cybersecurity awareness

Communication skills

Security best practices

Willingness to learn

Tools

ServiceNow

KnowBe4

Job description

Thrive in the Philippines is seeking a Security Engineer to join our Infosec GRC team. You will manage security awareness training campaigns, run phishing tests, and generate IT audit reports while troubleshooting platforms and ensuring client compliance.

This role suits someone transitioning from IT into cybersecurity, with a passion for learning and strong communication skills to explain security concepts to non-technical audiences.