Officer| Cybersecurity| Information Security| Audit Security| Shifting Schedule

AVENSYS CONSULTING INC.; Taguig; On-site; PHP 600,000 - 1,100,000; Full time

Job summary

AVENSYS CONSULTING INC. is seeking an Information Security Compliance Officer to oversee global security compliance, audits, and risk assessments.

The role involves collaborating with teams to embed security best practices, managing incidents, and ensuring ISO 27001, PCI-DSS, and GDPR compliance across operations. The ideal candidate will have strong knowledge of ISO 27001, data privacy regulations, and experience with Azure Entra/Intune.

Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.
• 4 - 7 years of experience in Security & Compliance, Information security management, or any Cybersecurity related field.
• Strong working knowledge of ISO 27001 (mandatory).
• Security Certifications such as CISM, CompTIA Security+ etc. and /or experience with PCI DSS / NIST is advantageous.
• Familiarity with Microsoft environment such as Azure Entra, Intune Policies is advantageous.
• Excellent verbal, written, interpersonal communication and presentation skills.

Responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit-readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business team.

Job description

As an Information Security Compliance Officer, you will be responsible for managing and ensuring the organization’s information security compliance across all our global operations. Your role will involve collaborating across teams to integrate security practices, conducting regular audits and risk assessments, liaising with external auditors and ensuring compliance to different security frameworks such as ISO 27001, PCI-DSS, GDPR etc. This role requires strong knowledge and experience with ISO:27001, and Data privacy regulations.Your ability to handle incidents, policy development, threat and vulnerability management, assess IT infrastructure security, will be added advantage. Further any experience on working in Microsoft Azure environments will be very beneficial.

Roles and Responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit-readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business team.

Qualifications & Skills

• Bachelor’s degree in IT, Computer Science, or a related field
• 4 - 7 years of experience in Security & Compliance, Information security management, or any Cybersecurity related field.
• Strong working knowledge of ISO 27001 (mandatory)
• Security Certifications such as CISM, CompTIA Security + etc. and /or experience with PCI DSS / NIST is advantageous.
• Familiarity with Microsoft environment such as Azure Entra, Intune Policies is advantageous.
• Ability to work well in a team and collaborate effectively with colleagues at all levels. Excellent and effective verbal, written, interpersonal communication and presentation skills.
• Must be highly organized, detail oriented and exhibit a strong sense of professionalism.