Security Risk & Maturity Assessment Consultant

HRTX; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

HRTX is seeking a Risk and Security Assessment Consultant to conduct security and risk assessments in a fast-paced environment, delivering timely, practical recommendations to mitigate identified risks.

The role follows industry standards (ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP, CSA CCM) and regulatory requirements, and includes maturity assessments, discovery workshops, client presentations, and security training across IT and business units.

Qualifications

• Over 3 years of experience in Information Technology.
• Holds 23 years of specific experience in security assessments, including Cloud Security Assessment, Third Party Security Risk Assessments, ISMS/NIST Assessment, SOC 2 Type 2 Assessment, RCSA, Configuration Review, Architecture Review, and Controls Review (must have).
• Facilitated at least one IT Risk Assessment project.
• Experience with Data Privacy frameworks such as PDPA, GDPR, and the Data Privacy Act of 2012.
• Experience in Security Awareness and Training initiatives.
• At least 1 year of consulting or advisory engagement experience (preferred).
• Strong knowledge in IT Audit/Assessments and Maturity Assessments.
• Strong knowledge of information security standards and guidelines, including ISO 27001/2, NIST, CIS, PCI DSS, and SWIFT CSP.
• Understands local regulations such as BSP circulars.
• Knowledgeable in cloud computing, storage, security, and virtualization best practices.
• Effective communicator across organizational levels; skilled in technical writing and infographic reporting.
• Strong time management and ability to multi-task with shifting priorities.
• Delivers exemplary customer service to internal and external stakeholders.
• Certifications such as ISC2 CISSP, ISMS LA/LI, ISACA CISA/CRISC, or PCI DSS/SWIFT/HITRUST related preferred.

Responsibilities

• Conducts security and/or risk assessments in a fast-paced environment and provides timely, practical recommendations to mitigate identified risks.
• Performs security and/or risk assessments aligned with ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP, CSA CCM and regulatory requirements.
• Carries out maturity assessments in cybersecurity and IT.
• Engages in discovery workshops with consultants and key stakeholders across IT and other business units.
• Participates in project presentations for client project teams and other stakeholders.
• Facilitates security training and awareness programs.

Skills

Security assessments

IT risk assessments

Cloud security

Data privacy frameworks

IT audit & maturity assessments

Technical writing

Infographics reporting

Stakeholder communication

Project facilitation

Job description

HRTX is seeking a Risk and Security Assessment Consultant to conduct security and risk assessments in a fast-paced environment, delivering timely, practical recommendations to mitigate identified risks.

The role follows industry standards (ISO 27001/2, NIST, CIS, PCI DSS, SWIFT CSP, CSA CCM) and regulatory requirements, and includes maturity assessments, discovery workshops, client presentations, and security training across IT and business units.