Senior Information Security SME & Risk Advisor

Umpisa Inc.; Hinoba-an; On-site; PHP 700,000 - 1,200,000; Full time

Job summary

Umpisa Inc. in the Philippines is seeking an Information Security Analyst to design, implement, and maintain security controls across the organization. You will serve as a subject matter expert, ensuring secure operations while aligning with ISO 27001, NIST, and other standards.

You will monitor security events, support audits, and advise IT, engineering and business teams. The role demands strong communication, problem solving, and the ability to translate complex security concepts into

Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or a related field (or equivalent experience).
• At least 5 years of experience in information security, cybersecurity, or IT risk roles.
• Strong understanding of information security principles and frameworks (NIST, ISO 27001, PCI DSS, SOC 2).
• Experience in hands-on SME or fast-growing organizations.
• Experience communicating policies and compliance requirements with technical and non-technical audiences at various levels.

Responsibilities

• Act as the organization’s Subject Matter Expert on information security concepts, risks, and controls.
• Identify, assess, and manage information security risks across systems, applications, and processes.
• Monitor security events, incidents, and alerts; investigate and coordinate remediation actions.
• Conduct regular vulnerability assessments and support penetration testing activities.
• Develop, review, and maintain information security policies, standards, and procedures.

Skills

Strong communication skills

Problem solving

Analytical skills

Security frameworks knowledge

Education

Bachelor’s degree in Information Security, Computer Science, IT, or related field

Tools

SIEM

Endpoint security

Vulnerability scanners

Job description

Umpisa Inc. in the Philippines is seeking an Information Security Analyst to design, implement, and maintain security controls across the organization. You will serve as a subject matter expert, ensuring secure operations while aligning with ISO 27001, NIST, and other standards.

You will monitor security events, support audits, and advise IT, engineering and business teams. The role demands strong communication, problem solving, and the ability to translate complex security concepts into