Security Analyst

GECO Asia Pte Ltd; Muntinlupa; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

GECO Philippines, part of GECO Asia Group, seeks a Security Analyst II to support audits, risk assessments, and compliance initiatives. The role involves evaluating controls, identifying risks, and documenting findings to strengthen security across IT environments.

The position requires collaboration with multiple business units and IT teams, with a hybrid setup (3 days onsite / 2 days remote). Strong English communication and analytical skills are essential to success.

Qualifications

• Experience in information security audits, risk management, or related fields.
• Familiar with ISO 27001, PCI DSS, and NIST frameworks.
• Knowledge of security monitoring tools and API integrations is an advantage.
• Strong written and verbal English communication.

Responsibilities

• Plan, conduct, and lead information security audits across the organization.
• Review access to financial and critical systems.
• Assess security controls and regulatory compliance.
• Prepare audit reports with remediation recommendations.
• Collaborate with teams to implement improvements and monitor risk.

Skills

Security auditing

Risk management

ISO 27001

Excel data analysis

Documentation & reporting

English communication

Job description

About Us:
GECO Philippines, part of the GECO Asia Group of Companies, is a specialist IT Consulting Services company with headquarters in Singapore and two delivery centers in the Philippines.

We’re Hiring: Security Analyst

We are looking for a detail-oriented and analytical Security Analyst II to support information security audits, risk assessments, compliance initiatives, and operational security activities.

In this role, you will evaluate security controls, identify potential risks, document audit findings, and recommend improvements aligned with corporate security policies and industry standards. You will collaborate with various business units and IT teams to strengthen security compliance and promote best practices across the organization.

Deployment Setup

Work Arrangement: Hybrid (3 days onsite / 2 days remote)

Key Responsibilities

• Plan, conduct, and lead information security audits across the organization.
• Review user access to financial systems, information systems, and other critical business applications.
• Assess the effectiveness of security controls, operational processes, and compliance with corporate policies and applicable regulations.
• Execute and document security audits across different IT environments and applications.
• Identify security gaps, control weaknesses, and potential risks.
• Prepare clear audit reports, document findings, and recommend practical remediation measures.
• Collaborate with management and cross-functional teams to implement security improvements and ensure compliance with established procedures.
• Support risk management, security monitoring, and continuous improvement initiatives.
• Assist in security documentation, awareness, and related activities as required.

Technical Competencies

• Experience in information security, IT security, security auditing, risk management, or a related field.
• Working knowledge of ISO 27001, PCI DSS, and NIST security frameworks and assessments.
• Familiarity with information security solutions, risk assessment methodologies, and security monitoring tools.
• Understanding of key security domains, including:
  • Access Control
  • Security Awareness
  • Risk Management
  • Security Operations
• Experience with API integrations and automation is an advantage.
• Proficiency in Microsoft Excel, including formulas and data analysis.
• Strong documentation, analytical, and reporting skills.
• Relevant certifications such as CompTIA Security+, PCI Internal Security Assessor (PCI-ISA), or Certified in Cybersecurity (CC) are an advantage.

Skills & Attributes

• Strong analytical, problem-solving, and critical-thinking skills.
• Excellent written and verbal English communication skills.
• Highly organized, detail-oriented, and committed to accuracy.
• Ability to assess risks, interpret findings, and recommend effective solutions.
• Strong coordination and collaboration skills when working with technical and non-technical stakeholders.
• Adaptable, self-motivated, and eager to learn and grow in the information security field.
• Customer-service oriented, with the ability to understand business needs and constraints.
• Willingness to travel when required.
  

Ready to make an impact?

Be part of a team that delivers world-class IT support, empowers users, and keeps business operations running smoothly.