ISO 27001 & Audit Readiness Lead — Hybrid

Eastvantage Business Solutions Inc.; Taguig; Hybrid; PHP 800,000 - 1,100,000; Full time

Job summary

Eastvantage Business Solutions Inc. is seeking an experienced Information Security Compliance Officer to strengthen our global security and regulatory posture. You will collaborate across teams to drive compliance initiatives and ensure controls meet evolving standards.

You will support frameworks such as ISO 27001, PCI-DSS and GDPR, manage audit readiness, investigate incidents, and help mature vulnerability management across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Science or any related field
• At least 4 years experience in Information Security, Compliance, Risk Management, or Cybersecurity
• 3 years experience in ISO27001 certification preferred but not required
• Knowledge at data privacy regulations and audit processes
• Experience with PCI-DSS, NIIT, or security certifications is a plus
• Familiarity with Microsoft technologies such as Azure, Entra ID, and Intube is highly desireable
• Willing to work on a hybrid work set-up

Responsibilities

• Drive information security and compliance initiatives
• Support ISO 27001, PCI-DSS, GDPR, and other security frameworks
• Manage audit readiness and collaborate with internal and external auditors
• Investigate security incidents and support vulnerability management efforts
• Influence and strengthen the organization's overall security posture

Skills

Information security

Compliance

Governance

Risk management

Audits

Incident investigation

Vulnerability management

Security frameworks

Education

Bachelor's degree in IT or CS

Tools

Azure

Entra ID

Intune

Job description

Eastvantage Business Solutions Inc. is seeking an experienced Information Security Compliance Officer to strengthen our global security and regulatory posture. You will collaborate across teams to drive compliance initiatives and ensure controls meet evolving standards.

You will support frameworks such as ISO 27001, PCI-DSS and GDPR, manage audit readiness, investigate incidents, and help mature vulnerability management across the organization.