Security GRC Specialist - ISO 27001 & Audit Focus

Telavi Ph; Batan; On-site; PHP 600,000 - 900,000; Full time

Job summary

Telavi Ph is seeking a Security Engineering Specialist to support the Cybersecurity Head in governing the company's security program. You will help develop and maintain security policies and standards, run risk assessments, monitor ISO 27001 compliance, and report on security performance.

This role focuses on governance, risk, and compliance with collaboration across technical teams. You will coordinate audits, assess vendor security, and deliver security awareness training while maintaining

Qualifications

• BS degree in IT/CS/CE or related field.
• 2–3 years in information security, governance, risk, compliance or audit.
• Working knowledge of ISO 27001, NIST CSF, and CIS Controls.
• Experience in risk assessment, policy writing, and audit or compliance support.
• Basic understanding of networks, cloud, and virtualization to discuss findings.

Responsibilities

• Develop, review, and maintain information security policies, standards, procedures, and baselines.
• Support ISMS implementation in line with ISO 27001.
• Conduct and maintain security risk assessments, keep the risk register current, and follow up on remediation actions.
• Monitor compliance with security policies, regulatory requirements, and customer security requirements; report gaps.
• Coordinate vulnerability assessments and penetration testing (VAPT) engagements; track findings to closure.
• Review security configurations and change requests against baselines; raise issues with technical teams.
• Conduct periodic access reviews and assess effectiveness of security controls (backup, patching, DR).
• Assess vendor/third-party security posture and review security terms in contracts.
• Plan and coordinate internal/external audits; collect evidence and track findings to closure.
• Plan and deliver security awareness training for employees.
• Maintain accurate records of risks, exceptions, incidents, audits, and policy changes.

Skills

Information security governance

Risk assessment

Policy writing

Audit support

ISMS implementation

Security policies

Reporting to management

Education

Bachelor's degree in Information Technology/Computer Science/CE/EC Engineering

Job description

Telavi Ph is seeking a Security Engineering Specialist to support the Cybersecurity Head in governing the company's security program. You will help develop and maintain security policies and standards, run risk assessments, monitor ISO 27001 compliance, and report on security performance.

This role focuses on governance, risk, and compliance with collaboration across technical teams. You will coordinate audits, assess vendor security, and deliver security awareness training while maintaining