InfoSec & GRC Specialist: Audits, Security Ops & Risk

MicroSourcing International; Metro Manila; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

MicroSourcing is seeking an Information Security Specialist to strengthen cybersecurity and operational resilience. You will bridge GRC and hands-on security operations to meet international standards, regulatory mandates, and client commitments.

Responsibilities include audits, risk assessments, security training, and cross‑functional collaboration with IT, HR, and external auditors. This hybrid role supports our security program in the Philippines.

Qualifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field.
• 2–4 years of experience in Information Security, IT Audit, GRC, or Cybersecurity Operations.
• Solid knowledge of ISO 27001, SOC 2, PCI DSS, and the NIST Cybersecurity Framework.
• Understanding of risk management, security controls, and endpoint security.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Audit & Compliance: Support audits (ISO/IEC 27001, SOC 2, PCI DSS) and track remediation.
• Security Operations: Monitor tools (EDR/XDR, SIEM), manage alerts, run scans, coordinate incident response.
• Risk & Governance: Perform risk assessments, evaluate third-party risks, maintain risk registers.
• Security Awareness: Help design and deliver security training and phishing simulations.
• Stakeholder Management: Collaborate with IT, HR, Operations, auditors, and clients to complete security questionnaires.

Skills

Information Security

Regulatory Compliance

Risk Assessment

Security Operations

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Vanta

OneTrust

Archer

EDR/XDR

SIEM

Job description

MicroSourcing is seeking an Information Security Specialist to strengthen cybersecurity and operational resilience. You will bridge GRC and hands-on security operations to meet international standards, regulatory mandates, and client commitments.

Responsibilities include audits, risk assessments, security training, and cross‑functional collaboration with IT, HR, and external auditors. This hybrid role supports our security program in the Philippines.