Information Security Specialist

MicroSourcing International; Metro Manila; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

MicroSourcing is seeking an Information Security Specialist to strengthen cybersecurity and operational resilience. You will bridge GRC and hands-on security operations to meet international standards, regulatory mandates, and client commitments.

Responsibilities include audits, risk assessments, security training, and cross‑functional collaboration with IT, HR, and external auditors. This hybrid role supports our security program in the Philippines.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field.
• 2–4 years of experience in Information Security, IT Audit, GRC, or Cybersecurity Operations.
• Solid knowledge of ISO 27001, SOC 2, PCI DSS, and the NIST Cybersecurity Framework.
• Understanding of risk management, security controls, and endpoint security.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Audit & Compliance: Support audits (ISO/IEC 27001, SOC 2, PCI DSS) and track remediation.
• Security Operations: Monitor tools (EDR/XDR, SIEM), manage alerts, run scans, coordinate incident response.
• Risk & Governance: Perform risk assessments, evaluate third-party risks, maintain risk registers.
• Security Awareness: Help design and deliver security training and phishing simulations.
• Stakeholder Management: Collaborate with IT, HR, Operations, auditors, and clients to complete security questionnaires.

Skills

Information Security

Regulatory Compliance

Risk Assessment

Security Operations

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Vanta

OneTrust

Archer

EDR/XDR

SIEM

Job description

The Information Security Specialist is responsible for strengthening MicroSourcing’s cybersecurity baseline and operational resilience. Acting as a hybrid bridge between Governance, Risk & Compliance (GRC) and Hands-on Security Operations, this role ensures the organization adheres to strict international standards, regulatory mandates, and client security commitments.

Role Summary

The Information Security Specialist is responsible for strengthening MicroSourcing’s cybersecurity baseline and operational resilience. Acting as a hybrid bridge between Governance, Risk & Compliance (GRC) and Hands-on Security Operations, this role ensures the organization adheres to strict international standards, regulatory mandates, and client security commitments.

Key Responsibilities

• Audit & Compliance: Support internal/external audits (ISO/IEC 27001, SOC 2, PCI DSS) and manage audit evidence, walkthroughs, and remediation tracking.
• Security Operations: Monitor tools (EDR/XDR, SIEM, vulnerability scanners), manage security alerts, perform system scans, and coordinate incident response.
• Risk & Governance: Conduct security risk assessments, evaluate third‑party/vendor risks, maintain risk registers, and support the Information Security Management System (ISMS).
• Security Awareness: Help design and deliver company-wide security training, onboarding, and phishing simulations.
• Stakeholder Management: Collaborate with IT, HR, Operations, external auditors, and clients to complete security questionnaires and drive continuous improvement.
  

What We’re Looking For

Must-Haves:

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
• 2–4 years of experience in Information Security, IT Audit, GRC, or Cybersecurity Operations.
• Good working knowledge of ISO 27001, SOC 2, PCI DSS, and the NIST Cybersecurity Framework.
• Practical understanding of risk management, security controls, and endpoint security.
• Strong analytical, documentation, and communication skills.

Nice-to-Haves:

• Experience in a BPO, IT Enabled Services (ITES), or Managed Services environment.
• Familiarity with the Philippine Data Privacy Act (DPA).
• Certifications such as CompTIA Security+, ISC2 CC, or ISO 27001 Internal/Lead Auditor.
• Experience with GRC platforms (Vanta, OneTrust, Archer) or enterprise security tools.

About MicroSourcing

With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.

Our commitment to 100% YOU

MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.

At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!

For more information, visit https://www.microsourcing.com/