Information Security Risk Consultant (ISO27001 and Auditing Experience)

Optum; Metro Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Medical Plan (HMO) from Day 1

Dental, Medical, and Optical Reimburse

Life and Disability Insurance

Tuition Fee Reimbursement

Annual Merit Increases

Employee Recognition

Training and Staff Development

All Mandatory Statutory Benefits

Job summary

Optum is seeking a senior information security professional in the Philippines to perform audits, identify control gaps, and implement corrective action plans while aligning security policies with ISO27001, NIST, and ITIL frameworks. You will monitor corrective actions, manage risk assessments, and lead security incident investigations, ensuring compliance and effective communication with stakeholders.

A Bachelor's degree and 6+ years of experience are required; CISSP/CISA/ISO27001 Lead Auditor

Qualifications

• 6+ years of information security experience including ISMS (ISO27001), risk management (ISO31000), HITRUST CSF, NIST CSF, and SOC Type 1/2.
• Auditing skills and ability to manage risk assessments/projects independently.
• Preferred certifications: CISSP, CISA, or ISO27001 Lead Implementer/Auditor.

Responsibilities

• Perform audits to identify control gaps and implement corrective action plans.
• Align security policies/standards with IT infrastructure frameworks (ISO27001, NIST, ITIL).
• Monitor compliance with corrective action plans and address non-compliance issues.
• Lead security incident investigations.
• Analyze business requirements to ensure solutions meet security policies and controls.
• Maintain security metrics and reporting.
• Stay current on information security topics and program requirements.
• Communicate with stakeholders and end users effectively.

Skills

Auditing

Risk assessment

Security governance

Education

Bachelor's degree or higher

Job description

Perform audits to identify control gaps and implement corrective action plans

Ensure alignment of security policies/standards with IT infrastructure frameworks (e.g., ISO 2700x, NIST, ITIL)

Monitor compliance with corrective action plans, and address non-compliance issues appropriately

Demonstrate understanding of discovery technologies to identify system vulnerabilities (e.g. scanning tools)

Establish appropriate security controls based on defined data classifications to align with applicable laws/regulations/standards

Facilitate/lead security incident investigation

Analyse business requirements and ensure that solutions meet established security policies and controls

Maintain metrics and ensure reporting as appropriate

Maintain current knowledge on information security topics and their applicability program requirements

Communicate professionally with stakeholders/end users through multiple communication

Job Requirements

Bachelor's degree or higher level of education

6+ years of Information security experience and experience with ISO27001 (ISMS), ISO31000 (Risk management), HITRUST CSF, NIST Cybersecurity Framework, SOC Type1/2

Must have auditing skills and the ability to manage risk assessments / projects independently.

Preferable CISSP, CISA or ISO27001 Lead Implementer or Lead Auditor certification.

Excellent communication skills both verbal and written.

Good presentation skills particularly ability to present technology elements in manner personnel can follow and act.

What we offer

• Market Total Rewards Package
• Retirement Plan
• Medical Plan (HMO) from Day 1 of employment
• Dental, Medical, and Optical Reimbursements
• Life and Disability Insurance
• Sick Leave Conversion
• Tuition Fee Reimbursement
• Employee Assistance Program (EAP)
• Annual Performance Based Merit Increases
• Employee Recognition
• Training and Staff Development
• Employee Referral Program
• Employee Volunteerism Opportunity
• All Mandatory Statutory Benefits

Who we are

Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare. As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.

We’re a diverse team with operations across North America, South America, Europe, Asia Pacific and the Middle East. This includes our over 25,000 employees in the Philippines.

Elevate your career with a leading health care company while improving lives.