Operational IT Security Specialist

Stolt Sea Farm SA; Mandaluyong; Hybrid; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

Career growth

Competitive compensation

Hybrid work model

Job summary

Stolt-Nielsen Limited is seeking an IT Security - Third Party Risk Management Specialist to monitor and maintain security policies across global IT systems, including vessels, depots, terminals and Seafarms. You will own risk management, incidents and third-party assessments while collaborating with security vendors and regional teams.

The role requires hands-on experience with M365 Security Suite, PAM, vulnerability management, and security monitoring tools, in an international setting.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• MUST HAVE experience in Third-Party Risk Management with at least 3 years in an international environment.
• Strong understanding of security threats, risks, networking, TCP/IP, incident response, and security technologies.
• Hands-on experience with Microsoft 365 Security Suite, PAM, vulnerability management, monitoring tools, and firewall/router administration.
• Familiarity with NIST, MITRE ATT&CK, and GDPR frameworks.
• Ability to analyze security reports and propose effective mitigations.

Responsibilities

• Identify, assess, and mitigate cybersecurity risks with external vendors and services.
• Detect, investigate, and resolve security incidents within defined SLAs.
• Respond to suspicious emails, phishing threats, and compromised sign-ins.
• Manage data privacy breaches and assist containment and remediation.
• Review and optimize firewall policies; maintain SOC documentation and reporting.
• Stay updated on threats and strengthen security posture using threat intelligence.

Skills

Third-Party Risk Management

Security Incident Response

Analytical & Problem-Solving

Communication & Collaboration

Teamwork

Education

Bachelor's degree in Computer Science or Information Technology

Tools

Microsoft 365 Security Suite

Privileged Access Management (PAM)

Vulnerability Management

Security monitoring tools

Firewall/Router administration

Job description

Are you interested in joining the world of international storage and distribution of bulk liquids, tankers, terminals, aquaculture & LNG? Stolt-Nielsen’s fast growing Business Technology - IT Security team is looking for an IT Security - Third Party Risk Management Specialist.

Stolt-Nielsen Limited (SNL) is the specialist storage and transportation provider for bulk liquids: chemicals, clean petroleum, gases, vegetable oils, biofuels and oleochemicals. We also focus on opportunities in aquaculture & LNG. Stolt-Nielsen plays an essential part in the global supply chain and every one of our people contributes to our success.

What You Will Be Doing

The IT Security Specialist is responsible for monitoring, applying, and maintaining security policies and guidelines for the global IT landscape, including Vessels, Depots, Terminals and Seafarms and acts as first point of contact for all security related incidents and tickets. This includes ownership and management of security risks, incidents and problem tickets assigned to third-party support and/or solution providers and risks assessments of third parties. The role requires strong interaction with the IT Security Officer, regional Service Delivery teams, security vendors and managed (security) service provider.

Key Responsibilities

• Third-Party Risk Management – Identify, assess, and mitigate cybersecurity risks associated with external vendors, service providers, applications, and services, including security compliance evaluations.
• Incident Management & Security Operations – Detect, investigate, and resolve security incidents within defined SLAs by analyzing alerts, correlating security data, determining root causes, assessing impact, and escalating out-of-scope incidents to the appropriate teams or vendors.
• Identity & Email Security Support – Respond to user inquiries on suspicious emails, identify phishing/spam threats, provide authentication support, and investigate high-risk sign‑ins or compromised accounts.
• Data Privacy & Breach Response – Respond to personal data breach incidents, assist in containment and remediation, recommend preventive measures, and prepare incident reports.
• Security Governance & Continuous Improvement – Review and optimize firewall policies and rulebases, update security policies, maintain SOC documentation, recommend process improvements, and provide regular security reporting.
• Threat Intelligence & Security Monitoring – Stay up to date on cybersecurity trends, vulnerabilities, and emerging threats by leveraging threat intelligence, data feeds, and security tools to strengthen the organization’s security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• MUST HAVE experience in Third-Party Risk Management with at least 3 years in an international environment.
• Strong understanding of security threats, risks, networking, TCP/IP, security incident response, and security technologies such as access control, encryption, and multi-factor authentication.
• Hands‑on experience with Microsoft 365 Security Suite, Privileged Access Management (PAM), Vulnerability Management, network and security monitoring tools, and preferably firewall and router administration.
• Experience with security and privacy frameworks such as NIST, MITRE ATT&CK, and GDPR.
• Ability to analyze security reports, recommend appropriate security controls and mitigations, and effectively investigate and respond to security incidents.
• Self-driven and able to work independently, with strong communication, analytical, critical thinking, problem-solving, interpersonal, and teamwork skills.

What We Offer

• Be part of a global organization with excellent opportunities for career growth and professional development.
• Enjoy a competitive compensation package, along with attractive perks and comprehensive benefits.
• Experience the flexibility of a hybrid work setup that supports work-life balance.