Officer| Cybersecurity| Information Security| Audit Security| Shifting Schedule

Avensys Consulting; Taguig; Presencial; PHP 700.000 - 1.100.000; Jornada completa

Descripción de la vacante

Avensys Consulting Pte Ltd seeks an Information Security Compliance Officer to manage security compliance across global operations. You will collaborate across teams to embed security practices, conduct audits, and coordinate with external auditors.

The role focuses on ISO 27001, PCI-DSS, GDPR, risk assessments, incident handling, and policy development, with familiarity in Microsoft Azure environments.

Formación

• Bachelor’s degree in IT, Computer Science or related field.
• 4–7 years in Security & Compliance, information security management, or cybersecurity.
• Strong knowledge of ISO 27001 is mandatory.
• Certifications such as CISM, CompTIA Security+ or PCI DSS/NIST experience is advantageous.
• Familiarity with Azure Environments is beneficial.

Responsabilidades

• Conduct regular security audits, risk assessments and reviews of IT infrastructure and operations.
• Maintain compliance with ISO 27001, PCI-DSS, GDPR and collect audit evidence.
• Prepare for internal and external audits and ensure audit-readiness documentation.
• Monitor security, manage incidents and perform vulnerability analysis.
• Investigate security incidents across endpoints, servers and networks with IT/business teams.

Conocimientos

Auditing experience

Risk assessment

Information security management

ISO 27001 knowledge

Communication skills

Educación

Bachelor’s degree in IT, Computer Science

Herramientas

Azure Entra

Intune Policies

Descripción del empleo

As an Information Security Compliance Officer, you will be responsible for managing and ensuring the organization’s information security compliance across all our global operations. Your role will involve collaborating across teams to integrate security practices, conducting regular audits and risk assessments, liaising with external auditors and ensuring compliance to different security frameworks such as ISO 27001, PCI-DSS, GDPR etc. This role requires strong knowledge and experience with ISO:27001, and Data privacy regulations.Your ability to handle incidents, policy development, threat and vulnerability management, assess IT infrastructure security, will be added advantage. Further any experience on working in Microsoft Azure environments will be very beneficial.

Roles and Responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with technical certifications such as ISO 27001, PCI-DSS, GDPR etc. Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit-readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business team.

Qualifications & Skills

• Bachelor’s degree in IT, Computer Science, or a related field
• 4 - 7 years of experience in Security & Compliance, Information security management, or any Cybersecurity related field.
• Strong working knowledge of ISO 27001 (mandatory)
• Security Certifications such as CISM, CompTIA Security + etc. and /or experience with PCI DSS / NIST is advantageous.
• Familiarity with Microsoft environment such as Azure Entra, Intune Policies is advantageous.
• Ability to work well in a team and collaborate effectively with colleagues at all levels. Excellent and effective verbal, written, interpersonal communication and presentation skills.
• Must be highly organized, detail oriented and exhibit a strong sense of professionalism.