Senior IT Security Analyst — Vulnerability & Risk Lead

Socium - Teams Done Differently; Makati; Presencial; PHP 1.200.000 - 2.000.000; Jornada completa

Descripción de la vacante

Socium - Teams Done Differently is seeking an IT Security Senior Analyst to lead vulnerability and exposure management for critical IT assets. The role drives risk assessments, threat modeling, and the continuous improvement of vulnerability management processes, guidelines, and procedures.

The ideal candidate has a strong IT security background, extensive experience in vulnerability management, and the ability to communicate findings clearly to application owners and leadership.

Formación

• Graduate degree in Computer Engineering, Computer Science, Electronics and Communications Engineering, or related field.

Responsabilidades

• Perform vulnerability and risk assessments of IT systems prior to production deployment and in production.
• Identify, manage, and prioritize security threats and exposures affecting systems and infrastructure.
• Assess vulnerabilities and misconfigurations and recommend compensating controls.
• Prepare periodic reports and communicate findings to application owners for remediation.
• Monitor emerging cybersecurity threats and industry updates.
• Produce security metrics and reports on operations and compliance.
• Provide guidance to IT Security Analysts on compensating controls and remediation.
• Conduct root-cause analysis and recommend corrective actions.
• Regularly assess security tools and processes to improve efficiency.
• Define and refine security standards, policies, and procedures.
• Manage cybersecurity projects assigned by security leadership.

Descripción del empleo

Socium - Teams Done Differently is seeking an IT Security Senior Analyst to lead vulnerability and exposure management for critical IT assets. The role drives risk assessments, threat modeling, and the continuous improvement of vulnerability management processes, guidelines, and procedures.

The ideal candidate has a strong IT security background, extensive experience in vulnerability management, and the ability to communicate findings clearly to application owners and leadership.