[LPS] Infosec Officer

Lenovo PCCW Solutions Limited; Santo Niño 1st; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Health insurance

Job summary

Lenovo PCCW Solutions Limited in the Philippines seeks an Information Security Officer to maintain secure endpoints, respond to incidents, and enforce IT security policies across departments.

The role covers patching, incident analysis, risk assessments, and implementation of security controls, with a focus on end-user computing and policy compliance.

Qualifications

• 3+ years of hands-on desktop support for Windows and macOS.
• Experience with IT security incidents, phishing analysis, and incident reports.
• Certifications such as Microsoft, CISSP or CISM are preferred.
• Experience in endpoint security and policy implementation.

Responsibilities

• Perform security patching, hardening and remediation for End user computing environments.
• Investigate and respond to security incidents and service requests related to end-user computing.
• Analyse advisories and perform risk assessments, implementing recommendations.
• Provide consultation and implementation of IT security controls and SOPs.
• Conduct briefings to reinforce cybersecurity hygiene and policy updates for staff.
• Evaluate IT security tools and support security applications including whitelisting.
• Assess risk statements and provide recommendations on security strategies.

Skills

Desktop support

Endpoint security

Incident response

Communication

Education

Bachelor's degree in IT/CS

Microsoft certifications

CISSP

CISM

Job description

Role Summary

The Information Security Officer (ISO) will be responsible for maintaining the security posture of scientific IT endpoints, responding to security incidents, and ensuring compliance with IT security policies and standards. The ISO will work closely with the departments to provide comprehensive support in various security operations.

Key Responsibilities

• Perform security patching, hardening, and remediation for End user computing environments such as Windows OS, Mac OS, O365 and other standard desktop software and applications.
• Investigate and respond to security incidents and service requests related to end-user computing, including email phishing and analysis, coordinating mitigative measures and preparing official incident reports.
• Analyse advisories published by ITSS CERT and/or product manufacturers, perform risk assessments, and execute recommendations.
• Provide consultation, evaluation, and implementation of IT security controls, including cross-border travel evaluations and pre-emptive checks against IT security policies.
• Conduct briefings to reinforce IT cybersecurity hygiene practices, policy updates, and control implementation for new hires and existing staff.
• Evaluate and implement IT security tools, processes, and procedures, provide extended support for security applications, and handle software whitelisting requests.
• Responsible for evaluating risk statements based on IT security measures, providing recommendations on security strategies, assessing compliance with SOPs and guidelines, and conducting vulnerability checks to ensure effective risk mitigation.

Qualifications

Bachelor's degree in information technology, Computer Science, or related field.

• Minimum 3 years of hands-on desktop support experience supporting Windows and macOS operating systems.
• Experience with end point security related support, such as handling IT security incidents, email phishing and analysis, mitigative measures and preparing official incident reports.
• Professional certifications such as Microsoft certifications, CISSP, CISM, or equivalent is preferred.
• Experience in endpoint security, incident response, & IT security policy implementation.
• Familiarity with industry IT security standards and compliance requirements.
• Strong communication and presentation skills.