InfoSec Compliance Lead | ISO 27001 & Audits

AVENSYS CONSULTING INC.; Taguig; On-site; PHP 600,000 - 1,100,000; Full time

Job summary

AVENSYS CONSULTING INC. is seeking an Information Security Compliance Officer to oversee global security compliance, audits, and risk assessments.

The role involves collaborating with teams to embed security best practices, managing incidents, and ensuring ISO 27001, PCI-DSS, and GDPR compliance across operations. The ideal candidate will have strong knowledge of ISO 27001, data privacy regulations, and experience with Azure Entra/Intune.

Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• 4 - 7 years of experience in Security & Compliance, Information security management, or any Cybersecurity related field.
• Strong working knowledge of ISO 27001 (mandatory).
• Security Certifications such as CISM, CompTIA Security+ etc. and /or experience with PCI DSS / NIST is advantageous.
• Familiarity with Microsoft environment such as Azure Entra, Intune Policies is advantageous.
• Excellent verbal, written, interpersonal communication and presentation skills.

Responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit-readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business team.

Job description

AVENSYS CONSULTING INC. is seeking an Information Security Compliance Officer to oversee global security compliance, audits, and risk assessments.

The role involves collaborating with teams to embed security best practices, managing incidents, and ensuring ISO 27001, PCI-DSS, and GDPR compliance across operations. The ideal candidate will have strong knowledge of ISO 27001, data privacy regulations, and experience with Azure Entra/Intune.