Security & GRC Specialist - Audit, Risk & Response

MicroSourcing International; Pasay; On-site; PHP 600,000 - 900,000; Full time

Job summary

MicroSourcing International is seeking an Information Security Specialist to strengthen cybersecurity and resilience across GRC and security operations. The role bridges governance with hands-on security work to meet international standards and client security commitments.

You will support audits, monitor security tools, assess risks, and drive security awareness and collaboration across IT, HR, operations, and external auditors.

Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
• 2–4 years of experience in Information Security, IT Audit, GRC, or Cybersecurity Operations.
• Knowledge of ISO 27001, SOC 2, PCI DSS, and the NIST Cybersecurity Framework.
• Understanding of risk management, security controls, and endpoint security.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Audit & Compliance: Support internal/external audits (ISO/IEC 27001, SOC 2, PCI DSS) and manage audit evidence, walkthroughs, and remediation tracking.
• Security Operations: Monitor tools (EDR/XDR, SIEM, vulnerability scanners), manage security alerts, perform system scans, and coordinate incident response.
• Risk & Governance: Conduct security risk assessments, evaluate third-party/vendor risks, maintain risk registers, and support ISMS.
• Security Awareness: Help design and deliver company-wide security training, onboarding, and phishing simulations.
• Stakeholder Management: Collaborate with IT, HR, Operations, external auditors, and clients to complete security questionnaires and drive continuous improvement.

Skills

Information Security

GRC

Cybersecurity Operations

ISO 27001

SOC 2

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

Vanta

OneTrust

Archer

Job description

MicroSourcing International is seeking an Information Security Specialist to strengthen cybersecurity and resilience across GRC and security operations. The role bridges governance with hands-on security work to meet international standards and client security commitments.

You will support audits, monitor security tools, assess risks, and drive security awareness and collaboration across IT, HR, operations, and external auditors.