IT Security QA

Questronix Corporation 2; Pasig; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

Questronix Corporation 2 is seeking a seasoned Security Specialist to lead assurance, engineering, and governance activities in Ortigas, Pasig. You will perform vulnerability scans, pen tests, risk assessments, and develop security policies, controls, and incident response plans.

You will collaborate with IT and development teams to embed security into design and operations, produce regular security metrics for senior management, and ensure audits and compliance reporting are prepared and timely.

Qualifications

• Minimum of 5 years of experience in IT security, information assurance, or a related field.
• Strong understanding of security frameworks and standards such as ISO 27001, NIST, GDPR, and HIPAA.
• Hands-on experience with security assessments, including vulnerability scanning, penetration testing, and risk assessments.
• Solid background in security engineering, with the ability to implement security tools, technologies, and solutions.
• Proficient in conducting security audits and reviews of internal and third-party systems.
• Experience working with cross-functional teams to integrate security into software development and IT operations.
• Strong knowledge of incident response procedures, forensic analysis, and mitigation strategies.
• Familiarity with compliance reporting and audit preparation.
• Excellent report writing and communication skills, with the ability to present findings and metrics to senior management.
• Up-to-date with emerging threats, technologies, and best practices in cybersecurity.
• Amenable to work in Ortigas (fully onsite)

Responsibilities

• Perform regular security assessments, including vulnerability scans, penetration tests, and risk assessments.
• Develop, implement, and maintain security policies, procedures, and controls for compliance with standards and regs.
• Perform security reviews and audits of internal and third-party systems.
• Implement security solutions and technologies to protect against cyber threats.
• Collaborate with IT and development teams to integrate security into system design and deployment processes.
• Investigate and respond to security incidents, including forensic analysis and coordination with incident response teams.
• Stay current with emerging threats and industry trends to improve security posture.
• Generate and present regular security reports and metrics to senior management, documenting findings and outcomes.
• Prepare and submit compliance reports and documentation for audits.
• Document and communicate security findings and recommendations to stakeholders.

Skills

IT security

Security frameworks

Incident response

Security auditing

Cross-functional collaboration

Tools

Vulnerability scanning

Penetration testing

Forensic analysis

Compliance reporting tools

Job description

Job Description

Security Assurance

• Conduct regular security assessments, including vulnerability scans, penetration tests, and risk assessments to identify and mitigate security risks.
• Develop, implement, and maintain security policies, procedures, and controls to ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, NIST, ISO 27001).
• Perform security reviews and audits of internal and third-party systems to ensure adherence to security best practices.

Security Engineering

• Ensure to implement security solutions and technologies to protect against cyber threats and vulnerabilities.
• Collaborate with IT and development teams to integrate security into system design, application development, and deployment processes.
• Investigate and respond to security incidents, including conducting forensic analysis and coordinating with incident response teams.

Compliance and Risk Management

• Stay current with emerging security threats, technologies, and industry trends to continuously improve security posture.
• Support and preparation and submission of compliance reports and documentation for audits.

Reporting

• Generate and present regular security reports and metrics to senior management, highlighting key security events, trends, and the effectiveness of security measures.
• Documentsecurity incidents, including the nature of the threat, response actions, and outcomes.
• Prepare and submit compliance reports and documentation for audits, ensuring accurate and timely reporting of security posture and incidents.

Collaboration and Communication

• Work closely with cross-functional teams to address security-related issues and implement effective solutions.
• Provide expert guidance and recommendations on security matters to senior management and other stakeholders.
• Document and communicate security findings, recommendations, and status to relevant parties.

Requirements

Qualifications

• Minimum of 5 years of experience in IT security, information assurance, or a related field.
• Strong understanding ofsecurity frameworksand standards such asISO 27001, NIST, GDPR, and HIPAA.
• Hands-on experience withsecurity assessments, includingvulnerability scanning, penetration testing, and risk assessments.
• Solid background insecurity engineering, with the ability to implement security tools, technologies, and solutions.
• Proficient in conductingsecurity auditsand reviews of internal and third-party systems.
• Experience working with cross-functional teams to integrate security into software development and IT operations.
• Strong knowledge ofincident response procedures, forensic analysis, and mitigation strategies.
• Familiarity with compliance reporting and audit preparation.
• Excellent report writing and communication skills, with the ability to present findings and metrics to senior management.
• Up-to-date with emerging threats, technologies, and best practices in cybersecurity.
• Strong analytical and planning skills;
• Good communication and presentation skills;
• Excellent problem-solving skills;
• Amenable to work in Ortigas (fully onsite)