Senior Security Officer

Open iT, Inc.; Lucena; On-site; PHP 700,000 - 900,000; Full time

Job summary

Open iT, Inc. is seeking a Senior Security Officer to ensure the integrity of its network and protect against cybersecurity threats. This role includes monitoring and responding to incidents, producing reports, and developing security policies.

Key qualifications include at least 5 years in cybersecurity compliance, knowledge of ISO 27001 and SOC2, and the ability to communicate complex concepts effectively. The ideal candidate will also act as a Data Protection Officer.

Qualifications

• 5+ years of experience in cybersecurity compliance assessment.
• Advanced knowledge of security frameworks and standards.
• Strong ethical judgment in handling confidential investigations.
• Excellent problem-solving and analytical skills.
• Ability to communicate complex concepts to non-technical stakeholders.

Responsibilities

• Monitor and respond to computer security incidents.
• Protect information systems against various threats.
• Produce and present security incident reports.
• Develop and implement IT security policies and standards.
• Act as a Data Protection Officer ensuring compliance with laws.

Skills

Cybersecurity compliance assessment

Security frameworks knowledge

Technical support skills

Problem-solving skills

Effective communication skills

Education

Degree in Psychology or Sociology

Tools

ISO 27001

SOC2

CCNA Cyber Ops Certification

Job description

The Senior Security Officer plays a vital role in securing the integrity of the company's network, data, and information systems and protecting the systems from cybersecurity risks, threats, and vulnerabilities.

The main responsibilities of this position include, but are not limited to:

• Monitor, detect, investigate, analyze, and respond to computer security incidents.
• Protect information systems from internal and external threats.
• Determine the cause of the security incident and appropriately preserve evidence for possible legal action.
• Produce security incident reports on briefings.
• Make recommendations on the appropriate corrective action for incidents.
• Inform and advise the management on incident prevention.
• Develop and implement relevant policies and standards, mitigate IT security threats, conduct audits, and find practical solutions for how to translate our security principles into a technical setup.
• Ensure privacy for both consumers, customers, and employees, follow IT security threats, trends, and technologies, and act as a source of inspiration and knowledge about these in the organization.
• Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards.
• Conduct periodic hardware/software inventory assessments, risk assessments, and investigations, and execute appropriate risk mitigations.
• Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines, and procedures.
• Act as a Data Protection Officer (DPO), ensuring compliance with data protection laws and managing data privacy activities.

Required Qualifications:

• At least 5 years of experience assessing and documenting test or analysis data to show cybersecurity compliance.
• Advanced knowledge of security frameworks, standards, and best practices (e.g., ISO 27001, SOC2)
• Strong sense of ethics and values, with the ability to handle confidential investigations with discretion.
• Advanced technical support and security operations skills.
• Excellent problem-solving and analytical skills.
• Effective communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• CCNA Cyber Ops Certification or certification in multiple operating systems, network technologies, or any security-related certification.

Preferred Qualifications:

• A degree in Psychology or Sociology is preferred, bringing a unique perspective to the intersection of human behavior and information security.