Information Security & Compliance Senior Specialist

CITADEL PACIFIC, LTD. - ROHQ; Taguig; On-site; PHP 600,000 - 900,000; Full time

Job summary

Citadel Pacific, Ltd. - ROHQ invites a capable Information Security Senior Specialist to support cybersecurity, risk management, compliance, and security initiatives. You will ensure controls, policies, and processes are implemented to protect assets and meet regulatory requirements.

You will conduct risk assessments, coordinate audits, and help with business continuity. The role requires collaboration with IT and business teams and strong communication with stakeholders.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field.
• Experience in information security, IT risk, audit, compliance or cybersecurity.
• Knowledge of vulnerability management and risk assessment.
• Familiarity with ISO 27001, COBIT, ITIL or similar frameworks.
• Strong analytical, communication and stakeholder management skills.

Responsibilities

• Conduct information security risk assessments and propose mitigations.
• Support policy, standard and procedure implementation and maintenance.
• Perform vulnerability assessments and track remediation.
• Coordinate security audits, reviews and risk assessments.
• Investigate security incidents and assist resolution.
• Assist with business continuity and disaster recovery planning.
• Conduct third-party/vendor security reviews and assessments.
• Collaborate with IT and business teams to improve security posture.

Skills

Information security

Risk assessment

Vulnerability management

Compliance

Stakeholder management

Policy & governance

Audit coordination

Analytical skills

Communication skills

Education

Bachelor's degree in Information Technology / Computer Science / Cybersecurity

Job description

About the role

The Information Security Senior Specialist is responsible for supporting the organization's cybersecurity, risk management, compliance, and information security initiatives. This role ensures that security controls, policies, and processes are effectively implemented to protect company assets and support regulatory and industry compliance requirements.

Key responsibilities

• Conduct information security risk assessments and recommend mitigation measures.

• Support the implementation and maintenance of security policies, standards, and procedures.

• Perform vulnerability assessments and track remediation activities.

• Coordinate security audits, compliance reviews, and risk assessments.

• Investigate and support the resolution of security incidents.

• Assist with business continuity and disaster recovery planning activities.

• Conduct third-party/vendor security reviews and assessments.

• Partner with IT and business teams to improve the organization's security posture.

About you

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

• At least 3 years of experience in Information Security, IT Risk, IT Audit, Compliance, or Cybersecurity.

• Experience in vulnerability management, risk assessment, and security compliance.

• Familiarity with information security frameworks and standards such as ISO 27001, COBIT, ITIL, or similar.

• Strong analytical, communication, and stakeholder management skills.