Information Security Specialist

Manuchar; Metro Manila; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Manuchar is seeking an experienced Information Security Specialist to strengthen cybersecurity governance, risk management, and audit readiness across our global IT landscape.

You will collaborate with stakeholders, support audits, maintain the ISMS, and promote security awareness to protect digital assets. A 3+ year background in information security and a related bachelor’s degree are required.

Qualifications

• Bachelor’s degree in IT, CS, cybersecurity, or related field.
• Minimum 3 years in information security or cyber risk management.
• Experience supporting audits and regulatory compliance.
• Background in multinational/global environments preferred.

Responsibilities

• Monitor and report on global information security controls effectiveness.
• Coordinate remediation for vulnerabilities, audit findings, compliance gaps, and risks.
• Support internal/external security audits, evidence gathering, and follow-up.
• Operate and maintain ISMS, including ISO 27001 activities.
• Monitor compliance with policies, standards, regulatory requirements, and contracts.
• Analyze threat intelligence and provide actionable insights to stakeholders.
• Conduct security risk assessments and monitor risk treatment plans.
• Support mergers and acquisitions through security due diligence.
• Develop and deliver security awareness programs across the org.

Skills

ISO 27001

NIST

CIS Controls

Regulatory compliance

Risk management

Audits

Stakeholder management

English proficiency

Governance

Threat intel

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field

Job description

Secure Our Business. Protect Our Future.

We are seeking an experienced and highly motivated Information Security Specialist to join our global IT team. This role plays a critical part in strengthening our cybersecurity governance framework, supporting security risk management activities, ensuring compliance with international standards, and safeguarding our organization's digital assets.

As a key member of the Information Security function, you will work closely with global stakeholders, IT teams, business leaders, and external auditors to drive security compliance, risk remediation, audit readiness, and security awareness initiatives across the organization.

Key Responsibilities

• Monitor and report on the effectiveness of global information security controls and elevate identified issues.
• Coordinate and track remediation activities for vulnerabilities, audit findings, compliance gaps, and security risks.
• Support and coordinate internal and external security audits, including evidence gathering and follow-up action management.
• Operate and maintain the Information Security Management System (ISMS), including ISO 27001-related activities.
• Monitor compliance with information security policies, standards, regulatory requirements, and contractual obligations.
• Analyze threat intelligence and provide actionable security insights to stakeholders.
• Conduct security risk assessments and monitor risk treatment plans through completion.
• Support mergers, acquisitions, and other business initiatives through security due diligence and assessments.
• Develop and deliver security awareness programs and promote cybersecurity best practices across the organization.

Qualifications

Education

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.

Experience

• Minimum of 3 years' experience in Information Security, Cybersecurity, IT Risk Management, or related disciplines.
• Experience supporting security audits, regulatory compliance, and risk management initiatives.
• Hands-on experience with security control monitoring, ISMS operations, and cybersecurity governance activities.
• Background working in multinational or global environments is highly preferred.

Certifications

Candidates with one or more of the following certifications are highly encouraged to apply:

• CISSP
• CISM
• CISA

Required Knowledge & Skills

• Strong knowledge of information security frameworks such as ISO 27001, NIST, and CIS Controls.
• Understanding of regulatory and compliance requirements, including GDPR, NIS2, SOX, and data privacy regulations.
• Experience with information security risk management, threat intelligence, and security governance.
• Strong analytical, organizational, and problem-solving skills.
• Excellent communication and stakeholder management capabilities.
• Ability to communicate effectively with both technical and non-technical audiences.
• English proficiency is a must
• Experience using governance, risk, compliance, and reporting tools is an advantage.

Why Join Us?

• Opportunity to work in a global organization with international exposure.
• Collaborate with security leaders and stakeholders across multiple regions.
• Drive meaningful cybersecurity initiatives that directly impact business resilience.
• Professional development, training, and certification opportunities.
• Competitive compensation and benefits package.