Information Security Analyst | Hybrid in Taguig

Gratitude Philippines; Taguig; On-site; PHP 600,000 - 900,000; Full time

Job summary

A leading cybersecurity organization in Taguig is seeking an experienced Information Security Analyst to monitor security systems, investigate threats, and conduct risk assessments. The successful candidate will have a Bachelor's degree in a relevant field, along with 5-7 years of experience in Information Security. Key responsibilities include coordinating security audits and ensuring compliance. This position offers a hybrid work setup.

Qualifications

• 5–7 years in Information Security, Risk, or Compliance functions.
• Certifications such as ISO27001, CISA, CISSP are a plus.
• BPO experience is preferred but not required.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.

Responsibilities

• Monitor security tools and investigate threats.
• Conduct risk assessments and vulnerability tracking.
• Coordinate security audits and compliance reporting.
• Collaborate with teams during incident response.
• Collaborate with technical and business teams during incident response, focusing on process coordination.
• Prepare reports, dashboards, and documentation to support compliance, audit readiness, and executive reporting.
• Contribute to security awareness and compliance training initiatives across the enterprise.
• Align security processes with frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory requirements.

Skills

Strong communication

Analytical problem-solving

Exposure to cybersecurity concepts

Familiarity with BCP/DR planning

Incident response

Communication

Education

Bachelor’s in engineering/science, Computer Science, Cybersecurity

Master’s preferred

Tools

SIEM

Vulnerability management tools

Firewalls

Job description

Information Security Analyst | Hybrid in Taguig

Hybrid - Taguig 5-10 Yrs Exp Bachelor Full-time

Job Description

We are seeking a skilled Information Security Analyst to help safeguard our organization’s systems, networks, and data. In this role, you will monitor security tools, detect and investigate threats, conduct risk and vulnerability assessments, and implement protective measures to ensure a secure technology environment

• Support Security Business Partners in delivering governance, risk, and compliance initiatives.
• Conduct risk assessments, vulnerability tracking, and remediation follow-ups.
• Coordinate security audits (internal and external), ensuring evidence collection and compliance reporting.
• Assist in developing, testing, and maintaining Business Continuity Plans (BCP) and Disaster Recovery (DR) exercises to ensure organizational resilience.
• Collaborate with technical and business teams during incident response, focusing on process coordination.
• Prepare reports, dashboards, and documentation to support compliance, audit readiness, and executive reporting.
• Contribute to security awareness and compliance training initiatives across the enterprise.
• Align security processes with frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory requirements.

Qualifications

• Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field (Master’s preferred).
• BPO experience is preferred but not required.
• Certifications such as ISO27001, CISA, CISSP, CISSP, or BCP/DR-related certifications (e.g., CBCP, ISO 22301 Lead Implementer) are a plus.
• 5–7 years in Information Security, Risk, or Compliance functions.
• Familiarity with BCP/DR planning, testing, and integration into risk management and audit functions.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Understanding of information security principles, GRC frameworks (ISO 27001, NIST, CIS, PCI-DSS), and risk assessment methodologies.
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.
• Strong communication, analytical problem-solving, and ability to translate security and risk concepts for diverse business stakeholders.

Job Title: Information Security Analyst - Global Risk, Compliance & BCP

Work set up: Hybrid