InfoSec & GRC Operations Specialist

MicroSourcing International; Pasay; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

MicroSourcing in the Philippines is seeking an Information Security Specialist to strengthen cybersecurity posture. The role bridges Governance, Risk & Compliance and Hands-on Security Operations, ensuring adherence to international standards, regulatory mandates, and client security commitments.

You will support audits (ISO 27001, SOC 2, PCI DSS), monitor security tools, conduct risk assessments, and drive security awareness across the organization, collaborating with IT, HR, Operations,

Qualifications

• 2–4 years of experience in InfoSec, IT Audit, GRC, or SecOps.
• Degree in IT, Computer Science, Cybersecurity, or a related field.
• Working knowledge of ISO/IEC 27001, SOC 2, PCI DSS, or NIST CSF.
• Strong analytical, documentation, and cross-functional communication skills.

Responsibilities

• Audit & Compliance: Support internal/external audits (ISO 27001, SOC 2, PCI DSS), gather evidence, and track remediation.
• Security Operations: Monitor EDR/XDR, SIEM, and vulnerability scanners, respond to security alerts, and support incident handling.
• Risk & Governance: Perform risk assessments, evaluate vendor security, maintain risk registers, and support our ISMS.
• Security Awareness: Drive security campaigns, phishing simulations, and employee training.
• Stakeholder Coordination: Collaborate with IT, HR, Operations, clients, and auditors to align on security requirements.

Skills

InfoSec

GRC

SecOps

Audits

Cross-functional communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Vanta

OneTrust

Archer

Job description

MicroSourcing in the Philippines is seeking an Information Security Specialist to strengthen cybersecurity posture. The role bridges Governance, Risk & Compliance and Hands-on Security Operations, ensuring adherence to international standards, regulatory mandates, and client security commitments.

You will support audits (ISO 27001, SOC 2, PCI DSS), monitor security tools, conduct risk assessments, and drive security awareness across the organization, collaborating with IT, HR, Operations,