Information Security Compliance Officer

Eastvantage; Taguig; Hybrid; PHP 900,000 - 1,350,000; Full time

Job summary

Eastvantage is hiring an Information Security Compliance Officer in Taguig, Philippines. The role focuses on managing global information security compliance across operations, coordinating with teams to embed security practices and conducting audits and risk assessments.

The ideal candidate will have ISO 27001 expertise and familiarity with GDPR and PCI-DSS, with experience handling incidents and policy development. Remote-friendly hybrid work model is available.

Qualifications

• Bachelor’s degree in IT, CS or related field.
• 5–7 years in Security & Compliance or cybersecurity.
• Strong ISO 27001 knowledge; PCI-DSS/GDPR experience a plus.

Responsibilities

• Conduct regular security audits, risk assessments, and reviews.
• Maintain compliance with ISO 27001, PCI-DSS, GDPR; collect evidence for audits.
• Prepare for audits and ensure audit-readiness documentation.
• Monitor security incidents and analyze vulnerabilities.
• Investigate security incidents across endpoints, servers, and networks with IT and business teams.

Skills

ISO 27001

Audits & risk assessments

Incident handling

Education

Bachelor’s degree in IT/CS

Tools

Azure Entra

Intune Policies

Job description

We're Hiring: Information Security Compliance Officer!

As an Information Security Compliance Officer, you will be responsible for managing and ensuring the organization’s information security compliance across all our global operations. Your role will involve collaborating across teams to integrate security practices, conducting regular audits and risk assessments, liaising with external auditors and ensuring compliance to different security frameworks such as ISO 27001, PCI-DSS, GDPR etc. This role requires strong knowledge and experience with ISO:27001, and Data privacy regulations.

Your ability to handle incidents, policy development, threat and vulnerability management, assess IT infrastructure security, will be added advantage. Further any experience on working in Microsoft Azure environments will be very beneficial.

Location: Taguig City, Philippines
Work Mode: Flexible office & remote
Role: Information Security Compliance Officer

Roles and Responsibilities

• Conduct regularsecurity audits, risk assessments, and reviews focused on ITinfrastructure and operations.


• Maintain compliancewith technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collectevidence and artifacts to meet compliance requirements.


• Prepare for and manageinternal and external audits and ensure all necessary documentation foraudit-readiness.


• Monitor security,manage security cases & tickets, perform security incident analysisand vulnerability analysis.


• Handle and investigatesecurity incidents across endpoints, servers, and networks by liaisingwith IT and business team.

Qualifications & Skills

• Bachelor’s degree inIT, Computer Science, or a related field


• 5 - 7 years ofexperience in Security & Compliance, Information security management,or any Cybersecurity related field.


• Strong workingknowledge of ISO 27001 (mandatory)


• SecurityCertifications such as CISM, CompTIA Security + etc. and /or experiencewith PCI DSS / NIST is advantageous.


• Familiarity withMicrosoft environment such as Azure Entra, Intune Policies isadvantageous.


• Ability to work wellin a team and collaborate effectively with colleagues at all levels.Excellent and effective verbal, written, interpersonal communication andpresentation skills.


• Must be highly organized,detail oriented and exhibit a strong sense of professionalism.