IT Security Officer

Sleek; Angeles; On-site; PHP 700,000 - 1,200,000; Full time

Job summary

Sleek is seeking an IT Security Officer to lead IT audit and risk assessments, review changes for security impact, and drive policy compliance across departments. You will coordinate security training, disseminate security communications, and manage incident response including DR/BCP considerations.

The role requires at least five years in IT security, strong Python basics, and familiarity with ISO 27001, NIST, and OWASP standards. Splunk SIEM experience is essential, with CASB/XDR as a bonus.

Qualifications

• Degree in Computer Science, Information Security, or Information Systems.
• At least 5 years of experience in IT security space.
• Strong Python programming basics and methodologies.
• Familiar with TRM or equivalent regulatory framework.
• Experience with IT controls standards: ISO 27001, NIST, OWASP, Cloud Security.
• Experience with Splunk SIEM is necessary; CASB/XDR tools are a bonus.
• Strong analytical thinking with attention to detail.
• Good communication and interpersonal skills.
• Security certifications (CISSP, CISM, CRISC, CGEIT, CISA) are a plus.

Responsibilities

• Develop and maintain IT Audit and Risk assessments under the Cybersecurity/GRC Manager.
• Review impacts of changes pre/post-implementation to improve security posture.
• Promote controls and policies across security/compliance committees.
• Coordinate with vendors on information security training and awareness.
• Disseminate security communications across the organization.
• Collect evidence for audits and compliance.
• Assess security posture of third-party vendors and suppliers.
• Guard Sleek from threats; respond to incidents and initiate DR/BCP if needed.
• Report and track incidents in SIEM and other sources.
• Assist with risk item classification and rating.
• Drive regular security improvement across departments.

Skills

Python basics

Analytical thinking

Communication skills

Education

Bachelor's or higher in Computer Science / Information Security / Information Systems

Tools

Splunk SIEM

CASB/XDR tools

ISO 27001 / NIST / OWASP knowledge

Job description

Meet Sleek. We are an all-in-one digital platform helping entrepreneurs and investors to register their companies in Singapore, Hong Kong & Australia, and assist them with the management of their accounting, audit, and taxes, in a 100% digital manner. We build cutting-edge technology to automate manual work and provide a delightful experience to our 5,000+ clients. Naturally, we are continuously looking for great people to join our dynamic team!

We are a team of 500 builders from 17 countries, with offices in Singapore, Hong Kong, Sydney, UK & the Philippines, committed to delivering a great experience to our clients.

At Sleek, you will find a fast-paced environment focused on building great solutions, and endless opportunities for learning and knowledge sharing, whether it’s around a coffee with your colleagues at the office, or via video calls with your peers based overseas! If you believe in tech for good and want to make a change to the way things are done traditionally, this is the place for you.

We are looking for our next IT Security Officer, to help us grow!

Job Description

• Develop and maintain IT Audit and Risk assessments for departments, under the guidance of our Cybersecurity/GRC Manager
• Review impacts of changes pre/post-implementation to our system to maintain or improve our security posture
• Evaluate and spread the word on controls and policies to drive compliance, and provide feedback to various security/compliance committees
• Develop material and coordinate with vendors on information security training and awareness
• Disseminate security communications across the organization as required
• Collect evidence for purposes of audit and compliance
• Assist with assessing the security posture of third-party vendors and suppliers
• Guard Sleek from internal/external threats. Raise and respond to security incidents reported, and communicate with committees to initiate DR/BCP if necessary
• Report and track incidents raised in SIEM and other sources
• Aid the proper classification and rating of risk items
• Initiate regular improvement drives for security across departments

Qualifications

• Degree in Computer Science, Information Security, or Information Systems;
• At least 5 years of experience in IT security space
• Thorough grasp of Python programming basics and optimal methodologies
• Good understanding of TRM or equivalent regulatory framework
• Familiar with industry standards related to IT Controls - ISO 27001, NIST, OWASP, Cloud Security
• Experience with Splunk SIEM is necessary, CASB/XDR tools are a bonus
• Strong in analytical thinking with attention to detail
• Good communication, written, and interpersonal skills
• Security-related certifications are a plus: CISSP, CISM, CRISC, CGEIT, and/or CISA