Senior Security Compliance Lead - ISO 27001 & SOC 2

TaskUs; Pasig; On-site; PHP 1,000,000 - 1,600,000; Full time

Job summary

TaskUs is seeking a Senior Security Compliance Analyst in Pasig to lead security program audits and maintain regulatory alignment. You will manage evidence for external certifications, monitor compliance activities, and drive remediation with operations teams.

The role requires hands-on experience with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 and strong policy-writing skills. Ideal candidates have 4+ years in IT security compliance, certification credentials, and a proven ability to

Qualifications

• In-depth experience with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001.
• 4+ years in IT/IS security compliance, IT audit, and risk assessments.
• Ability to prepare reports and presentations for leadership.
• Strong writing and communication skills for policy and evidence artifacts.
• Experience with third-party and vendor security assessments is preferred.

Responsibilities

• Lead security compliance efforts for ISO 27001, SOC 2, PCI DSS, HIPAA/HITRUST.
• Manage evidence collection and audit responses for external certifications.
• Monitor and report compliance activities; drive remediation progress.
• Develop and enforce security policies, standards, and procedures.
• Provide risk assessment processes and guidance across the organization.

Skills

Security compliance

Audit

Risk assessment

Vendor security

Policy writing

Communication

Education

Bachelor’s degree in MIS/Computer Science or Business

Certifications: CISA, CISSP, CISM

Tools

Vulnerability assessment tools

Security incident tools/SIEM

Job description

TaskUs is seeking a Senior Security Compliance Analyst in Pasig to lead security program audits and maintain regulatory alignment. You will manage evidence for external certifications, monitor compliance activities, and drive remediation with operations teams.

The role requires hands-on experience with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 and strong policy-writing skills. Ideal candidates have 4+ years in IT security compliance, certification credentials, and a proven ability to