Security Engineering Specialist

Telavi Ph; Batan; Vor Ort; PHP 600.000 - 900.000; Vollzeit

Zusammenfassung

Telavi Ph is seeking a Security Engineering Specialist to support the Cybersecurity Head in governing the company's security program. You will help develop and maintain security policies and standards, run risk assessments, monitor ISO 27001 compliance, and report on security performance.

This role focuses on governance, risk, and compliance with collaboration across technical teams. You will coordinate audits, assess vendor security, and deliver security awareness training while maintaining

Qualifikationen

• BS degree in IT/CS/CE or related field.
• 2–3 years in information security, governance, risk, compliance or audit.
• Working knowledge of ISO 27001, NIST CSF, and CIS Controls.
• Experience in risk assessment, policy writing, and audit or compliance support.
• Basic understanding of networks, cloud, and virtualization to discuss findings.

Aufgaben

• Develop, review, and maintain information security policies, standards, procedures, and baselines.
• Support ISMS implementation in line with ISO 27001.
• Conduct and maintain security risk assessments, keep the risk register current, and follow up on remediation actions.
• Monitor compliance with security policies, regulatory requirements, and customer security requirements; report gaps.
• Coordinate vulnerability assessments and penetration testing (VAPT) engagements; track findings to closure.
• Review security configurations and change requests against baselines; raise issues with technical teams.
• Conduct periodic access reviews and assess effectiveness of security controls (backup, patching, DR).
• Assess vendor/third-party security posture and review security terms in contracts.
• Plan and coordinate internal/external audits; collect evidence and track findings to closure.
• Plan and deliver security awareness training for employees.
• Maintain accurate records of risks, exceptions, incidents, audits, and policy changes.

Kenntnisse

Information security governance

Risk assessment

Policy writing

Audit support

ISMS implementation

Security policies

Reporting to management

Ausbildung

Bachelor's degree in Information Technology/Computer Science/CE/EC Engineering

Jobbeschreibung

Job Summary

As a Security Engineering Specialist, you will support the Cybersecurity Head in governing the company's security program. You will help develop and maintain security policies and standards, run risk assessments, monitor compliance with ISO 27001 and other requirements, track remediation of security findings, and report on security performance. This is an individual contributor role focused on governance, risk, and compliance, working with technical teams who carry out hands‑on implementation and operations.

Key Responsibilities/Duties

• Develop, review, and maintain information security policies, standards, procedures, and baselines, and make sure they are communicated and followed.
• Support the implementation and maintenance of the Information Security Management System (ISMS) in line with ISO 27001.
• Conduct and maintain security risk assessments, keep the risk register current, and follow up on agreed treatment actions with risk owners.
• Monitor compliance with security policies, regulatory requirements, and customer security requirements, and report gaps and exceptions.
• Coordinate vulnerability assessment and penetration testing (VAPT) engagements, track findings through remediation with the responsible teams, and verify closure.
• Review security configurations, change requests, and system designs against approved baselines, and raise issues with the technical teams.
• Conduct periodic access reviews, and review the effectiveness of security controls such as backup, patching, and disaster recovery against policy.
• Assess the security posture of vendors and third parties, and review security terms in contracts and customer questionnaires.
• Plan and coordinate internal and external audits, collect evidence from system owners, and track audit findings to closure.
• Plan and deliver security awareness training and communications for employees.
• Maintain accurate records of risks, exceptions, incidents, audits, and policy changes.

Requirements:

Qualifications:

• Graduate of BS Information Technology, Computer Science, Computer Engineering, Electronics and Communications Engineering, or any related course.
• Minimum of 2–3 years of experience in information security, IT governance, risk, compliance, or audit.
• Working knowledge of information security frameworks and standards, such as ISO 27001, NIST CSF, and CIS Controls.
• Experience in risk assessment, policy writing, and audit or compliance support.
• Basic understanding of networks, infrastructure, cloud, and virtualization, enough to review controls and discuss findings with technical teams.

Specific skills & abilities:

• Ability to interpret security requirements and turn them into clear, practical policies and procedures.
• Strong analytical skills for assessing risks, control gaps, and audit findings.
• Excellent documentation, report writing, and presentation skills, including reporting to management.
• Ability to read scan results, logs, and system reports well enough to follow up on findings.
• Experience with spreadsheets, dashboards, or BI tools for KPI reporting.
• Familiarity with change management, backup, patching, and disaster recovery processes from a control and oversight perspective.
• Ability to work with and influence technical teams, vendors, and auditors without direct authority.

Personal qualities:

• Ability to work independently and collaboratively.
• Good time management and organizational skills.
• Ability to provide excellent customer service.
• Ability to manage work pressure and strict deadlines.
• Sound judgment and discretion when handling sensitive security matters.
• Self-motivated with a high level of integrity.