Systems Security Specialist

TELUS Digital; Metro Manila; Hybrid; PHP 900,000 - 1,400,000; Full time

Job summary

TELUS Digital is seeking a Systems Security Specialist III to support information security, privacy, governance, risk and compliance initiatives across global BPO operations. You will identify security gaps, assess their impact, and partner with Account Managers, Directors and cross-functional teams to implement remediation plans.

You will help with audit readiness for PCI DSS 2025 and ISO 27001, conduct client-environment reviews, and ensure controls are applied consistently across regions and

Qualifications

• Experience in information security, security compliance, privacy, or related fields.
• Experience supporting global security programs with distributed teams.
• Familiarity with PCI DSS and ISO 27001 requirements.
• Ability to translate findings into remediation plans.

Responsibilities

• Manage and support information security projects related to fraud, risk, data privacy, and operational security.
• Oversee security and compliance programs across APAC and Africa.
• Conduct global operational analyses, client assessments, and audits to identify control gaps, privacy threats, vulnerabilities, and process weaknesses.
• Document findings, assess risks, and present clear remediation recommendations to Account Managers, Directors, and relevant stakeholders.
• Work with cross-functional departments and business teams to develop, document, and monitor risk-treatment action plans.
• Recommend practical controls and process improvements to reduce security risks and potential organizational impact.
• Support Governance, Risk, and Compliance (GRC) activities, including risk assessments, control reviews, and compliance tracking.
• Assist with PCI DSS 2025 audit evidence collection and coordination.
• Support ISO 27001 internal audits, including documentation review, evidence gathering, and follow-up on corrective actions.
• Help business teams understand and apply security and privacy requirements within BPO operations and client processes.
• Maintain appropriate records of assessments, audit evidence, findings, remediation activities, and risk decisions.
• Participate in periodic team meetings, training sessions, and business-development activities to maintain relevant skills and knowledge.
• Perform other duties assigned by TELUS International or its entities that support data privacy, information security, and the rights of data subjects.

Skills

Information security

Security compliance

Risk management

Privacy

Stakeholder management

Analytical skills

Documentation

Communication

Job description

The Systems Security Specialist III supports and oversees information security, privacy, governance, risk, and compliance initiatives across global BPO operations. The role identifies security gaps, privacy threats, and process weaknesses; assesses their potential impact; and partners with Account Managers, Directors, and cross-functional teams to develop practical remediation plans.

The Specialist also supports audit readiness and evidence collection for PCI DSS 2025 and ISO 27001, conducts operational reviews for client environments, and helps ensure security and privacy controls are applied consistently across assigned regions and business operations.

Key Responsibilities

Manage and support information security projects related to fraud, risk, data privacy, and operational security.

Oversee security and compliance programs across APAC and Africa.

Conduct global operational analyses, client assessments, and audits to identify control gaps, privacy threats, vulnerabilities, and process weaknesses.

Document findings, assess risks, and present clear remediation recommendations to Account Managers, Directors, and relevant stakeholders.

Work with cross-functional departments and business teams to develop, document, and monitor risk-treatment action plans.

Recommend practical controls and process improvements to reduce security risks and potential organizational impact.

Support Governance, Risk, and Compliance (GRC) activities, including risk assessments, control reviews, and compliance tracking.

Assist with PCI DSS 2025 audit evidence collection and coordination.

Support ISO 27001 internal audits, including documentation review, evidence gathering, and follow-up on corrective actions.

Help business teams understand and apply security and privacy requirements within BPO operations and client processes.

Maintain appropriate records of assessments, audit evidence, findings, remediation activities, and risk decisions.

Participate in periodic team meetings, training sessions, and business-development activities to maintain relevant skills and knowledge.

Perform other duties assigned by TELUS International or its entities that support data privacy, information security, and the rights of data subjects.

Qualifications and Experience

Experience in information security, security compliance, risk management, privacy, or a related field.

Experience supporting global security or compliance programs and working with geographically distributed teams.

Knowledge of Governance, Risk, and Compliance practices and operational risk management.

Experience with audit preparation, evidence collection, control testing, or internal audits.

Familiarity with PCI DSS and ISO 27001 requirements.

Understanding of how to apply security and compliance controls in BPO or client-service environments.

Strong analytical, documentation, communication, and stakeholder-management skills.

Ability to translate security findings into clear, actionable remediation plans.

Ability to work collaboratively with operational teams, clients, and senior stakeholders.

Work Requirements

Hybrid work arrangement, with onsite reporting as required.

Availability for night and rotational shifts based on business needs.

Willingness and ability to travel as required.