Security GRC Engineer — Awareness & Phishing

Thrive; Mabalacat; On-site; PHP 600,000 - 900,000; Full time

Job summary

Thrive, a rapidly growing technology solutions provider, is seeking a Security Engineer to join its Infosec GRC team in the Philippines. You will lead security awareness training campaigns, run phishing tests, and troubleshoot platform issues, while aligning with client compliance needs and industry best practices.

The role emphasizes continuous learning and growth in cybersecurity, with collaboration across teams to ensure secure configurations, reliable reporting, and proactive risk reduction.

Qualifications

• Strong understanding of networking concepts and operating systems.
• Knowledge of cybersecurity threats and risk management.
• Ability to communicate technical security concepts to non-technical audiences.
• Strong interest in cybersecurity and willingness to learn.
• Experience with ISO27001, CMMC or similar frameworks is a plus.
• 3–5 years of information security or related role.

Responsibilities

• Manage security awareness training campaigns.
• Manage phishing tests.
• Troubleshoot phishing email delivery/interaction issues.
• Troubleshoot security tool performance issues, integrations and other platform problems.
• Create and maintain documentation for security processes, procedures, and technologies.
• Setup and generate IT audit reports.
• Audit client setups, ensuring accurate configuration is maintained.
• Stay current on security threats, attack techniques, and best practices.

Skills

Data analysis

Networking concepts

Security awareness

Communication skills

Troubleshooting

Security best practices

Tools

Active Directory

Entra ID

Email systems

ServiceNow

KnowBe4

Job description

Thrive, a rapidly growing technology solutions provider, is seeking a Security Engineer to join its Infosec GRC team in the Philippines. You will lead security awareness training campaigns, run phishing tests, and troubleshoot platform issues, while aligning with client compliance needs and industry best practices.

The role emphasizes continuous learning and growth in cybersecurity, with collaboration across teams to ensure secure configurations, reliable reporting, and proactive risk reduction.