Security 24/7

Tata Consultancy Services; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Tata Consultancy Services in the Philippines is seeking an experienced GRC/IT Risk professional to monitor security events, classify incidents, and drive remediation using Remedy and ServiceNow. The role involves coordinating with internal teams and vendors, maintaining documentation, and contributing to RCA and corrective actions.

The ideal candidate has 3–7 years in GRC, IT risk, compliance, audit, or cybersecurity, with exposure to BFSI or regulated industries.

Qualifications

• BSP regulatory framework (Outsourcing, Operational Resilience, IT Risk).
• It Governance, Risk Management, and Compliance frameworks.
• Vendor governance and third‑party risk management.

Responsibilities

• 24×7 real-time monitoring of security alerts.
• Incident classification, investigation, containment, and resolution.
• Ticket handling using Remedy and ServiceNow.
• Timely escalation as per defined escalation matrix.
• Coordination with internal teams and vendors.
• Participation in incident bridges and shift handovers.
• Contribution to RCA and corrective actions.

Skills

Security monitoring

Incident handling

Remedy/ServiceNow

Cloud security basics

SIEM/SOC operations

Log analysis

Documentation

Team collaboration

Regulatory awareness

Tools

Remedy

ServiceNow

FortiAnalyzer

FortiGate

Palo Alto Panorama

F5 BIG-IP

BeyondTrust

Akamai

Nagios

Active Directory

Microsoft 365

CrowdStrike

Tenable

Qualys

Sygnia/Velocity

Amazon SES

Bitly

Job description

• 24×7 real-time monitoring of security alerts
• Incident classification, investigation, containment, and resolution
• Ticket handling using Remedy and ServiceNow
• Timely escalation as per defined escalation matrix
• Coordination with internal teams and vendors
• Participation in incident bridges and shift handovers
• Contribution to RCA and corrective actions

Technical Skills

• Basic understanding of firewall and network security concepts (FortiGate, Palo Alto)
• Hands-on experience with security monitoring tools and dashboards
• Ability to analyze security alerts, logs, and events
• Working knowledge of cloud security fundamentals (AWS and Azure)
• Familiarity with SIEM/SOC operations and alert handling
• Experience using Remedy and ServiceNow for incident and ticket management

Operational Skills

• 24×7 shift-based operations and incident handling
• Incident classification, prioritization, and escalation
• Accurate documentation and ticket updates
• Adherence to SOPs, SLAs, and escalation matrices

Behavioral Skills

• Ability to work under pressure in a live production environment
• Team collaboration and willingness to learn
• Attention to detail and compliance mindset

Required Skills & Qualifications

Strong knowledge of:

• BSP regulatory framework (Outsourcing, Operational Resilience, IT Risk)
• IT Governance, Risk Management, and Compliance frameworks
• Vendor governance and third‑party risk management

Experience

• 3–7 years of experience in GRC, IT Risk, Compliance, Audit, or Cybersecurity.
• Experience in BFSI or similar highly regulated industry preferred.

24/7 Tools

• FortiAnalyzer/Fortigate - checking of logs/traffic
• Palo Alto Panorama - blocking, checking of logs/traffic
• F5 BIG‑IP Advanced WAF used for traffic swing & toggling of nodes
• BeyondTrust - account management
• Akamai - blocking & monitoring of traffic
• Nagios - security tools/host monitoring
• LDAP - account management
• Active Directory - account management
• Microsoft 365 - account management
• EPO/MacAfee - old tools for usb & pcidss
• Trellix - for usb & pcidss
• CrowdStrike - VA scanning
• Tenable - VA scanning
• Qualys - previously used for VA scanning
• Sygnia/Velocity - security tools alerts
• Remedy/ServiceNow - ticketing system
• Amazon SES - for health check monitoring, read only
• Bitly - qr & url shortening