SaaS InfoSec & Compliance Specialist

Avvoka

Manila

On-site

PHP 800,000 - 1,200,000

Full time

9 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Avvoka is seeking an Information Security Compliance Specialist to help maintain our ISMS and ensure ISO 27001 certification health. You will respond to customer security questionnaires, assess supplier risk, and manage security documentation with guidance from the Information Security Manager.

You’ll collaborate with Engineering, DevOps, Sales, Legal, and People Ops to keep security controls robust and transparent for clients and partners.

Qualifications

2-3 years in information security compliance, GRC, IT audit or a similar role.
Experience completing customer security questionnaires for a SaaS or technology business.
Experience assessing third-party or supplier security risk.
Enough technical understanding of cloud hosting, access control, encryption, AI integrations, and secure development to discuss them credibly with engineers and customers.
Clear, precise writing; able to turn technical controls into plain answers and policies.

Responsibilities

Run the ISMS: maintain the ISMS day-to-day, support SOC 2 Type II work, manage risk registers and risk treatments.
Answer customer security questionnaires with guidance from the Information Security Manager and maintain an approved answer library.
Assess supplier security: due diligence on new vendors, maintain supplier inventory, track remediation actions.
Manage security documentation: keep documentation library updated, map docs to customer commitments.