[LPS] Information Security Officer (ISO)

Lenovo PCCW Solutions Limited; Santo Niño 1st; On-site; PHP 600,000 - 900,000; Full time

Job summary

Lenovo PCCW Solutions Limited is seeking an Information Security Officer (ISO) responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards.

The ISO will work with departments to provide comprehensive security operations support, including patching, incident reporting, risk assessments, and policy enforcement for end-user computing environments.

Qualifications

• Bachelor’s degree in information technology, Computer Science, or related field.
• Minimum 3 years of hands on desktop support experience with Windows and macOS.
• Experience with end point security support, including IT security incidents and phishing analysis.
• Certifications such as Microsoft, CISSP, CISM preferred.
• Experience in endpoint security, incident response, and IT security policy implementation.
• Familiarity with industry IT security standards and compliance requirements.
• Strong communication and presentation skills.

Responsibilities

• Perform security patching, hardening, and remediation for End user computing environments (Windows, Mac, O365).
• Investigate and respond to security incidents and service requests related to end-user computing.
• Analyse advisories from ITSS CERT and product vendors, perform risk assessments and implement recommendations.
• Provide consultation and implementation of IT security controls, including cross-border travel evaluations.
• Conduct briefings to reinforce cybersecurity hygiene practices for new hires and staff.
• Evaluate and implement IT security tools and procedures; handle whitelisting requests.
• Assess risk statements and compliance with SOPs, and conduct vulnerability checks.

Skills

Desktop support

Incident response

Policy implementation

Communication skills

Education

Bachelor's degree in IT/CS

Job description

[LPS] Information Security Officer (ISO)

The Information Security Officer (ISO) will be responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards. The ISO will work closely with the departments to provide comprehensive support in various security operations.

Key Responsibilities

• Perform security patching, hardening, and remediation for End user computing environments such as Windows OS, Mac OS, O365 and other standard desktop software and applications.
• Investigate and respond to security incidents and service requests related to end-user computing, including email phishing and analysis, coordinating mitigative measures and preparing official incident reports.
• Analyse advisories published by ITSS CERT and/or product manufacturers, perform risk assessments, and execute recommendations.
• Provide consultation, evaluation, and implementation of IT security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.
• Conduct briefings to reinforce IT cybersecurity hygiene practices, policy updates, and control implementation for new hires and existing staff.
• Evaluate and implement IT security tools, processes, and procedures, provide extended support for security applications, and handle software whitelisting requests.
• Responsible for evaluating risk statements based on IT security measures, providing recommendations on security strategies, assessing compliance with SOPs and guidelines, and conducting vulnerability checks to ensure effective risk mitigation.

Qualifications

• Bachelor’s degree in information technology, Computer Science, or related field.
• Minimum 3 years of hands on desktop support experience supporting Windows and macOS operating systems.
• Experience with end point security related support, such as handling IT security incidents, email phishing and analysis, mitigative measures and preparing official incident reports.
• Professional certifications such as Microsoft certifications, CISSP, CISM, or equivalent is preferred.
• Experience in endpoint security, incident response, & IT security policy implementation.
• Familiarity with industry IT security standards and compliance requirements.
• Strong communication and presentation skills