Specialist, Information Security

ReSourcePro; Mandaluyong; On-site; PHP 446,400 - 669,600; Full time

Job summary

A global Information Security company is hiring a Specialist for Information Security in Mandaluyong, Philippines. This role involves supporting the implementation of ISO 27001 and SOC 1/2 frameworks while ensuring compliance with organizational policies. The position includes monitoring security operations and assisting in various audits. The ideal candidate has a Bachelor's degree in IT or Computer Science and 3-5 years of experience in Information Security or Cybersecurity. Opportunities for growth into a regional team lead role are anticipated.

Qualifications

• 3–5 years experience in Information Security, Cybersecurity, or Compliance.
• Experience with ISO 27001 and SOC 1/2 frameworks.

Responsibilities

• Support implementation of ISO 27001 and SOC 1/2 controls locally.
• Maintain security documentation, controls, and audit evidence.
• Monitor security operations, incidents, and ticketing activities.
• Support incident response, escalation, and BCP/DR activities.
• Assist in vulnerability management, patching, and endpoint compliance.
• Support internal/external audits (ISO, SOC, DPA 2012).
• Work with IT, HR, and Admin on security-related processes and projects.

Skills

Information Security

Cybersecurity

Compliance

ISO 27001

SOC 1/2

Education

Bachelor's degree in IT, Computer Science, or related field

Job description

Job Summary

The Specialist, Information Security (Philippines) will serve as the on-ground InfoSec representative for our Philippines operations, partnering closely with the global Information Security team. This roleis responsible forsupporting the rollout, localization, and ongoing operation of our ISO 27001 and SOC 1 & SOC 2-aligned Information Security Management System (ISMS) across the PHL region.

The specialist will be instrumental in replicating offshore security practices, tailoring them to the local context, and ensuring compliance with organizational policies and regional regulatory requirements. With business growth, this role is positioned to evolve into a regional team lead, overseeing broader security operations and governance acrossPHLregion.

Key Responsibilities

• Support implementation of ISO 27001 and SOC 1/2 controls locally
• Maintain security documentation, controls, and audit evidence
• Monitor security operations, incidents, and ticketing activities
• Support incident response, escalation, and BCP/DR activities
• Assist in vulnerability management, patching, and endpoint compliance
• Support internal/external audits (ISO, SOC, DPA 2012)
• Work with IT, HR, and Admin on security-related processes and projects

Qualifications

• Bachelor’s degree in IT, Computer Science, or related field
• 3–5 years experience in Information Security, Cybersecurity, or Compliance
• Experience with ISO 27001 and SOC 1/2 frameworks