Information Security Analyst

Gratitude Philippines; Taguig; On-site; PHP 781,200 - 837,000; Full time

Benefits offered by this job

Medical

Miscellaneous allowance

Dental

Provident Fund

Job summary

A leading technology firm is seeking an Information Security Analyst for their Global Risk, Compliance & BCP team based in Taguig. This role encompasses protecting systems and data from threats, monitoring security controls, and ensuring compliance with policies. Ideal candidates should have a background in Information Security with relevant degrees and certifications, plus 5-7 years of experience. The position offers a hybrid work setup with a competitive salary and additional perks.

Qualifications

• Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field (Master’s preferred).
• 5–7 years in Information Security, Risk, or Compliance functions.
• Strong communication and analytical problem-solving skills are essential.

Responsibilities

• Protect the organization’s systems, networks, and data from security threats.
• Monitor security controls and respond to incidents.
• Ensure compliance with security policies and regulatory requirements.

Skills

Information Security

Risk Management

Compliance

Analytical Problem-Solving

Communication

Education

Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field

Master’s in relevant field

Tools

SIEM

Firewalls

Vulnerability Management Tools

Job description

Description / Requirements

Job Title: Information Security Analyst - Global Risk, Compliance & BCP

Location: Taguig City

Work set up: Hybrid

Salary: PHP 70,000-75,000

Work schedule: Mid shift

The Information Security Analyst is responsible for protecting the organization’s systems, networks, and data from security threats. The role involves monitoring security controls, identifying vulnerabilities, responding to incidents, and ensuring compliance with security policies and regulatory requirements. The analyst works closely with IT and business teams to implement security best practices and maintain a strong security posture.

Qualifications

• Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field (Master’s preferred).
• BPO experience is preferred but not required.
• Certifications such as ISO27001, CISA, CISSP, CISSP, or BCP/DR-related certifications (e.g., CBCP, ISO 22301 Lead Implementer) are a plus.
• 5–7 years in Information Security, Risk, or Compliance functions.
• Familiarity with BCP/DR planning, testing, and integration into risk management and audit functions.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Understanding of information security principles, GRC frameworks (ISO 27001, NIST, CIS, PCI-DSS), and risk assessment methodologies.
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.
• Strong communication, analytical problem-solving, and ability to translate security and risk concepts for diverse business stakeholders.

Perks and benefits

• Medical
• Miscellaneous allowance
• Dental
• Provident Fund