Lead Risk & Security Assessments Consultant

Nexus Recruitment Group; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Nexus Recruitment Group is seeking a skilled Risk & Security Consultant (Lead Level) to oversee information security assessments across enterprise environments in the Philippines. You will identify risks, evaluate controls, and deliver actionable remediation plans while mentoring junior staff.

The role emphasizes collaboration with IT, legal, and business stakeholders, producing clear reports and dashboards, and maintaining up-to-date knowledge of threat landscapes and regulatory changes.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or related field.
• 4-7 years of experience in information security, IT audit, or risk management roles.
• Strong knowledge of risk and control frameworks such as ISO 27001, NIST, SOC 2, PCI-DSS, or similar.
• Experience in performing or leading security assessments, audits, or third-party risk reviews.
• Familiarity with governance, risk, and compliance (GRC) tools is an advantage.
• Excellent written and verbal communication skills with the ability to present technical findings to non-technical audiences.
• Detail-oriented and highly organized, with the ability to manage multiple assessments simultaneously.

Responsibilities

• Conduct risk and security assessments across applications, infrastructure, third-party vendors, and internal controls.
• Evaluate and document risk exposure, security posture, and compliance against established frameworks (e.g., ISO 27001, NIST, CIS, COBIT).
• Prepare detailed assessment reports, including identified risks, control gaps, and actionable recommendations.
• Support the development and implementation of risk mitigation strategies and remediation plans.
• Collaborate with cross-functional teams including IT, legal, compliance, and business stakeholders to understand and align security requirements.
• Lead or contribute to the planning and execution of security assessments, audits, and readiness reviews.
• Stay up to date with current threat landscapes, emerging risks, and relevant regulatory changes.
• Support the preparation of risk dashboards and management reports.

Skills

Risk assessment

Information security

IT audit

GRC governance

Communication

Education

Bachelor's degree in Information Security / Computer Science

Tools

GRC tools

ISO 27001

Job description

Nexus Recruitment Group is seeking a skilled Risk & Security Consultant (Lead Level) to oversee information security assessments across enterprise environments in the Philippines. You will identify risks, evaluate controls, and deliver actionable remediation plans while mentoring junior staff.

The role emphasizes collaboration with IT, legal, and business stakeholders, producing clear reports and dashboards, and maintaining up-to-date knowledge of threat landscapes and regulatory changes.