Information Security Specialist

MicroSourcing International; Pasay; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

MicroSourcing in the Philippines is seeking an Information Security Specialist to strengthen cybersecurity posture. The role bridges Governance, Risk & Compliance and Hands-on Security Operations, ensuring adherence to international standards, regulatory mandates, and client security commitments.

You will support audits (ISO 27001, SOC 2, PCI DSS), monitor security tools, conduct risk assessments, and drive security awareness across the organization, collaborating with IT, HR, Operations,

Qualifications

• 2–4 years of experience in InfoSec, IT Audit, GRC, or SecOps.
• Degree in IT, Computer Science, Cybersecurity, or a related field.
• Working knowledge of ISO/IEC 27001, SOC 2, PCI DSS, or NIST CSF.
• Strong analytical, documentation, and cross-functional communication skills.

Responsibilities

• Audit & Compliance: Support internal/external audits (ISO 27001, SOC 2, PCI DSS), gather evidence, and track remediation.
• Security Operations: Monitor EDR/XDR, SIEM, and vulnerability scanners, respond to security alerts, and support incident handling.
• Risk & Governance: Perform risk assessments, evaluate vendor security, maintain risk registers, and support our ISMS.
• Security Awareness: Drive security campaigns, phishing simulations, and employee training.
• Stakeholder Coordination: Collaborate with IT, HR, Operations, clients, and auditors to align on security requirements.

Skills

InfoSec

GRC

SecOps

Audits

Cross-functional communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Vanta

OneTrust

Archer

Job description

Role Summary

The

Role Summary

The Information Security Specialist is responsible for strengthening MicroSourcing’s cybersecurity baseline and operational resilience. Acting as a hybrid bridge between Governance, Risk & Compliance (GRC) and Hands-on Security Operations, this role ensures the organization adheres to strict international standards, regulatory mandates, and client security commitments.

What You’ll Do

• Audit & Compliance: Support internal/external audits (ISO 27001, SOC 2, PCI DSS), gather evidence, and track remediation.
• Security Operations: Monitor EDR/XDR, SIEM, and vulnerability scanners, respond to security alerts, and support incident handling.
• Risk & Governance: Perform risk assessments, evaluate vendor security, maintain risk registers, and support our ISMS.
• Security Awareness: Drive security campaigns, phishing simulations, and employee training.
• Stakeholder Coordination: Collaborate with IT, HR, Operations, clients, and auditors to align on security requirements.

Requirements

What We’re Looking For

• 2–4 years of experience in InfoSec, IT Audit, GRC, or SecOps.
• Degree in IT, Computer Science, Cybersecurity, or a related field.
• Working knowledge of ISO/IEC 27001, SOC 2, PCI DSS, or NIST CSF.
• Strong analytical, documentation, and cross-functional communication skills.

Nice-to-Haves

• Experience in a BPO, IT Enabled Services (ITES), or Managed Services environment.
• Familiarity with the Philippine Data Privacy Act (DPA).
• Certifications like CompTIA Security+, ISC2 CC, or ISO 27001 Internal/Lead Auditor.
• Hands-on experience with GRC tools (Vanta, OneTrust, Archer) or modern SecOps monitoring tools.

About MicroSourcing

With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.

Our commitment to 100% YOU

MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.

At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!

For more information, visit https://www.microsourcing.com/