IT Security & Infrastructure Specialist

MWC Group AG; Mabalacat; On-site; PHP 558,000 - 670,000; Full time

Job summary

MWC Clark Freeport Zone, Pampanga is seeking an IT Security & Infrastructure Specialist to strengthen cybersecurity for an international financial-services business. The role focuses on practical security controls, with backing infrastructure support as needed, and requires onsite work at Clark Freeport Zone, Pampanga.

The ideal candidate has hands-on security experience, solid knowledge of Microsoft 365 stack, and a disciplined approach to risk, access governance and incident response.

Qualifications

• Demonstrable hands-on experience implementing and operating cybersecurity controls.
• Strong practical capability with Microsoft 365, Entra ID, Defender, Intune and endpoints.
• Sound knowledge of networking, firewalls, VPNs, Windows administration, backups and recovery.
• Experience investigating security alerts and responding to incidents.
• Ability to assess gaps, prioritise risks, implement improvements and test that controls work.
• Careful judgement around privileged access, sensitive information and changes to live systems.
• Clear communication, reliable follow-through and a willingness to document and share knowledge.
• Availability to work onsite in Clark Freeport Zone, Pampanga.

Responsibilities

• Microsoft security: Strengthen security across Microsoft 365, Entra ID, Defender, Intune and endpoints.
• Identity and access: Implement least-privilege access, MFA, Conditional Access, privileged-account controls, regular access reviews and secure joiner, mover and leaver processes.
• External-threat prevention: Improve protection against phishing, impersonation, malicious email, account compromise, malware and ransomware through technical controls and practical staff awareness.
• Endpoint protection and vulnerability management: Maintain secure device configurations, endpoint detection and response, device compliance, vulnerability assessments and risk-prioritised patching.
• Monitoring and incident response: Maintain useful security logs and alerts; investigate suspicious activity, detect incidents, coordinate containment and recovery, and document lessons learned.
• Network and remote-access security: Review and strengthen firewalls, VPN access, network segmentation and remote administration controls.
• Backups and resilience: Maintain protected backups, test restoration and recovery procedures, and work with colleagues and providers to address critical dependencies and single points of failure.
• Infrastructure cover: Support our senior IT administrator with Microsoft 365, devices, servers, networking and operational troubleshooting when required.
• Documentation and reporting: Keep configurations, asset records, procedures, incident playbooks and control evidence current. Explain risks, priorities and progress clearly to management and support compliance and audit requests.

Skills

Hands-on security

Problem solving

Documentation

On-site availability

Tools

Microsoft 365

Entra ID

Defender

Intune

Endpoint security

Identity management

Job description

IT Security & Infrastructure Specialist

MWC | Clark Freeport Zone, Pampanga | Full-time, onsite

Salary: PHP 50,000–60,000 gross per month

Help strengthen the cyber security of an international financial-services business.

MWC operates across multiple jurisdictions, platforms and service providers. We are seeking a hands‑on IT Security & Infrastructure Specialist to protect our people, information and operations against external cyber threats.

You will work alongside our existing senior IT administrator, who continues in his administration role. Your primary responsibility will be cyber security, with the capability to support and cover infrastructure operations when needed. CRM and business systems development sit outside this position.

THE ROLE

You will design, implement, test and maintain practical security controls, building a highly resilient, well‑controlled environment with layered defences. You will help eliminate single points of failure through tested recovery arrangements, clear documentation and shared operational knowledge.

Your responsibilities will include:

• Microsoft security: Strengthen security across Microsoft 365, Entra ID, Microsoft Defender, Intune and endpoints; configure, test and maintain effective security policies.
• Identity and access: Implement least‑privilege access, MFA, Conditional Access, privileged‑account controls, regular access reviews and secure joiner, mover and leaver processes.
• External‑threat prevention: Improve protection against phishing, impersonation, malicious email, account compromise, malware and ransomware through technical controls and practical staff awareness.
• Endpoint protection and vulnerability management: Maintain secure device configurations, endpoint detection and response, device compliance, vulnerability assessments and risk‑prioritised patching. Verify that remediation is effective.
• Monitoring and incident response: Maintain useful security logs and alerts; investigate suspicious activity, detect incidents, coordinate containment and recovery, and document lessons learned.
• Network and remote‑access security: Review and strengthen firewalls, VPN access, network segmentation and remote administration controls.
• Backups and resilience: Maintain protected backups, test restoration and recovery procedures, and work with colleagues and providers to address critical dependencies and single points of failure.
• Infrastructure cover: Support our senior IT administrator with Microsoft 365, devices, servers, networking and operational troubleshooting when required.
• Documentation and reporting: Keep configurations, asset records, procedures, incident playbooks and control evidence current. Explain risks, priorities and progress clearly to management and support compliance and audit requests.

WHAT WE ARE LOOKING FOR

• Demonstrable hands‑on experience implementing and operating cyber security controls in a business environment.
• Strong practical capability with Microsoft 365, Entra ID, Defender, Intune, endpoint security and identity management.
• Sound knowledge of networking, firewalls, VPNs, Windows administration, patching, backups and recovery.
• Experience investigating security alerts and responding methodically to suspected incidents.
• Ability to assess gaps, prioritise risks, implement improvements and test that controls work.
• Careful judgement around privileged access, sensitive information and changes to live systems.
• Clear communication, reliable follow‑through and a willingness to document and share knowledge.
• Availability to work onsite in Clark Freeport Zone, Pampanga.

Experience in regulated financial services or another environment with strong security and audit requirements is preferred. Relevant Microsoft, cyber security or networking certifications are welcome; practical capability and evidence of delivery are central to our assessment.

WHY JOIN MWC?

This is an opportunity to make a direct contribution to the security and resilience of an international business, working alongside an established IT colleague with a clear focus on practical security improvements.