Work Setup and Location: On-Site, Arayat st., Mandaluyong, Metro Manila

Work Schedule: Morning or Mid-Shift, Monday-Friday (8-hour shift only)

Experience Level: 3-5 years

No. of employees required: 1

About the Role:

We are seeking a skilled IT Analyst (Cyber Security) to join our security team. This role will focus on protecting the organization's IT infrastructure, applications, and data from cyber threats and ensuring compliance with security best practices. You will be responsible for identifying vulnerabilities, monitoring security events, and responding to incidents while helping to implement a strong security posture across the organization.

Key Responsibilities:

Security Monitoring and Threat Detection

• Continuously monitor networks, systems, and applications for signs of security threats and vulnerabilities.
• Analyze security logs and data to detect abnormal patterns or potential intrusions.
• Utilize security tools (e.g., SIEM, intrusion detection systems) to identify, investigate, and respond to incidents.

Incident Response and Remediation

• Lead or support incident response efforts to mitigate and resolve security breaches or attacks.
• Investigate security incidents, document findings, and implement corrective actions.
• Provide recommendations on improving security controls to prevent future incidents.

Vulnerability Assessment and Risk Management

• Conduct regular vulnerability assessments, penetration testing, and security audits.
• Collaborate with IT and development teams to address vulnerabilities and security risks.
• Assist in risk assessments and help prioritize security measures based on threat landscape and business needs.

Security Policy and Compliance

• Assist in developing, implementing, and enforcing security policies, standards, and procedures.
• Ensure compliance with regulatory requirements and industry best practices (e.g., GDPR, ISO 27001).
• Support internal and external security audits and assessments.

Security Awareness and Training

• Conduct security awareness training for employees to promote safe computing practices.
• Communicate security risks and best practices to stakeholders at all levels.

Collaboration and Reporting

• Work with cross-functional teams to integrate security measures into IT systems and workflows.
• Generate regular reports on security incidents, vulnerabilities, and the effectiveness of implemented security measures.

Qualifications and Skills:

• Education: Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field.
• Experience:
• 3-5 years of experience in cybersecurity, IT security, or a similar role.
• Hands-on experience with security tools, systems, and technologies (e.g., firewalls, SIEM, endpoint protection).
• Technical Skills:
• In-depth knowledge of security frameworks (e.g., NIST, CIS, ISO 27001).
• Experience with network security, encryption, identity and access management, and threat intelligence.
• Familiarity with cybersecurity tools such as Splunk, Wireshark, Nessus, or Qualys.
• Soft Skills:
• Strong analytical, problem-solving, and critical-thinking abilities.
• Excellent communication skills, with the ability to explain complex security concepts to non-technical audiences.
• Attention to detail and a proactive approach to identifying security risks.
• Certifications (preferred):
• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• CompTIA Security+ or equivalent cybersecurity certifications.

We are looking for a skilled Information Security Governance, Risk, and Compliance (GRC) Specialist to join the Avaloq CISO Governance team. The CISO Governance team is responsible for developing, implementing, and maintaining our organization's Information Security governance, risk management, and compliance programs. The ideal candidate has a deep understanding of information security practices, regulatory requirements, and risk management frameworks. The role is based in Manila.

Your key responsibilities

Your key responsibilities will include the following domains. You don't have to be an expert on everything, but you must be willing to learn!

• Governance and Compliance
  • Participate in the development and maintenance of Avaloq's information security governance framework.
  • Lead and aid with compliance-related issues across stakeholders.
  • Work closely with internal and external audits, both to support the audit activities and to manage the remediation of findings.
  • Report to management and relevant stakeholders on compliance status and security governance effectiveness.
• Policy Management
  • Provide guidance and assist in the drafting, revision, and implementation of security policies and procedures.
  • Monitor and evaluate the effectiveness of implemented policies and procedures.
  • Participate in regular policy reviews to ensure alignment with changing regulations and organizational objectives.
• Security Risk Management
  • Conduct and guide risk assessments to identify potential security threats and vulnerabilities.
  • Conduct security assessment of third-party vendors to evaluate compliance with Avaloq’s security standards.
  • Monitor third-party compliance with agreements and performance against organizational benchmarks.
• Awareness and Advocacy
  • Be an advocate for security among your colleagues.
  • Participate in the development and implementation of a comprehensive cybersecurity awareness program.
  • Craft engaging and informative security training materials for Avaloq employees.
  • Measure the effectiveness of employees' knowledge and competencies and adapt strategies based on feedback and trends.
  • Participate in internal security awareness activities such as new employee onboarding.
  • Stay updated with the latest developments in information security, risk management, and compliance.

The Information Security Officer will plan, implement, upgrade, and monitor security protocols for the protection of the TSA’s computer networks and information.   

The Information Security Officer will foster collaboration between IT and business units, ensuring compliance in Technology programs and projects, and working closely with Internal and External Audit teams throughout the process. They will also manage the process of gathering, analysing, and assessing information security and privacy threats while maintaining and monitoring evolving security best practices. 

Information Security Officer will be responsible for overseeing information security, cybersecurity and IT risk management programs based on industry-accepted information security and risk management frameworks. This individual will be an integral part of the Information Technology organisation reporting directly to the VP of Engineering to help improve and communicate the maturity levels of information security, state of cybersecurity and IT risk practices across TSA. 

Responsibilities

• Document controller
  - Collate and organise documents related to compliance against international standards and regulatory requirements
  - Engage with ISMS stakeholders and other business unit heads and representatives in collecting pertinent documents
  - Manage documents and track versions, changes, and revisions according to emerging trends, regulatory and industry standard requirements
• Compliance management
  - Work with the information security team in performing gap analysis, policy and procedure development
  - Review and assess compliance of initiatives against adopted standards of the organisation (ISO 27001:2022, PCI DSS, etc.)
  - Review and assess compliance requirements against regulations of Office of the Australian Information Commissioner (OAIC), National Privacy Commission (NPC) for the Philippines, and Office of the Privacy Commissioner (OPC) for New Zealand.
  - Review and assess compliance requirements against other pertinent regulations such as GDPR and other similar privacy and security regulations, and international standards such as CIS Controls, NIST CSF 2.0, NIST RMF, and other similar standards.
• Governance and risk management
  - Assist the information security team in engaging with ISMS stakeholders of the TSA security governance program initiatives and requirements.
  - Assist the information security team in third-party risk management and other pertinent process and procedures related to managing security risks over vendors and third-party service providers.
  - Perform risk assessments and risk reviews pertinent to the ISMS according to ISO 27001, PCI DSS and other relevant security and privacy standards.
  - Provide security awareness to all employees by means of presentations, communications and other methodologies adopted by TSA and provide recommendations for strengthening and ensuring delivery of the security awareness campaign.
•  Security Incident management
  - Work with the information security team in reviewing, revising, and developing incident response plan and playbook
  - Regularly perform preparations and capability assessments and testing of incident response of TSA
  - Collaborate with information security team and IT specialists and engineers in determining areas for improvement with regards to incident response handling
• Cyber threat intelligence and vulnerability management
  - Perform threat intelligence through OSINT and other open-source methodologies
  - Assist the information security team in preparation and planning VAPT and red teaming activities
  - Develop, collate, and manage related documents in threat and vulnerability management.

The Avaloq Security team is an international team of analysts, senior and expert software engineers and architects. The Avaloq Security team develops and maintains central application security frameworks and tools for all companywide technology stacks and consults the business teams on best practice implementations for context specific security requirements. It furthermore operates the group-wide application security assessments, monitors the security vulnerabilities and supports the business teams in related risk mitigation plans.

Your key tasks 

• Analysis, design and development of requirements in collaboration with colleagues of Product Development, customers, business analysts and software partners
• Collaboration and contribution in projects across departments
• Check the daily automated build process for security warnings and provide support to resolve it
• Monitor third party library enrolment, update, and removal by using in-house tools and Whitesource
• Provide expert analysis on false positives findings, validate exploitability of detected vulnerabilities, and develop possible fixes
• Maintain data for configuration control of the release baseline.
• Coordinate security actions across multiple team to ensure the high quality of the Avaloq products
•  Prepare and distribute reports and documentation of security risks
• Conduct periodic reviews to ensure compliance with established security policies and procedures
• Participate in technical talks to internal members regarding security implementation, vulnerabilities, and opportunities for improvement

The Governance, Risk, and Compliance (GRC) team member will be reporting to the Head of Information Security and is responsible for supporting and enhancing the organization’s efforts to ensure adherence to policies, regulatory requirements, and industry security best practices. This role involves coordinating, executing, and overseeing various tasks related to governance, risk management, and compliance to protect the organization's assets, reputation, and ensure operational effectiveness.

The GRC specialist will work together with the Security Operations Leader, Security Operations Engineer, and QIMA internal stakeholders to meet the objectives of the audit requirements, identify risks present in the group, and to assess non-conformities and non-compliance against the organization’s Information Security Management System Policy and align the remediation plan with target dates against the respective owners.

The GRC specialist must have a good understanding of the different security and data privacy laws and regulations and industry security best practices with the ability to apply these standards to the QIMA environment.

Key Responsibilities:

1. Governance:
   • Develop, implement, and maintain policies, procedures, and frameworks to support QIMA’s organizational governance objectives.
   • Foster a culture of security, compliance and ethical behavior within the organization.
   • Conduct regular assessments and audits of governance processes to identify areas for improvement.
2. Risk Management:
   • Identify, assess, and prioritize risks for remediation that may impact the organization’s operations and overall security posture.
   • Develop risk mitigation strategies and monitor their effectiveness, until closure.
   • Maintain a risk register and ensure all risks are documented, evaluated, and tracked.
   • Collaborate with various departments to create and implement risk management plans.
3. Compliance:
   • Stay up to date with changing regulations and assess their impact on the organization.
   • Work with the Data Privacy Office and Legal teams to ensure the organization complies with all relevant laws, regulations, and standards.
   • Conduct regular internal reviews and identify non-conformities against QIMA’s Information Security Management System Policy that needs to be addressed.
   • Deploy regular security awareness to all employees and work with training team for security trainings and programs to be delivered to QIMA.
4. Documentation and Reporting:
   • Maintain accurate records of GRC activities, including policy documents, risk assessments, and compliance reports.
   • Prepare and present reports on governance, risk, and compliance activities to senior management and the board of directors.
   • Document incidents and breaches and manage remediation actions.
5. Collaboration and Communication:
   • Liaise with Security, IT, Compliance, Legal, HR, and other departments and stakeholders to ensure cohesive compliance and risk management efforts.
   • Act as a point of contact for regulatory bodies, auditors and client security requirements.
   • Provide guidance and support to all QIMA employees on GRC-related matters.

Your Team

We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center.

The role requires a strong background and understanding of all cyber security domains.

In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation.

You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes.

Your mission

• Identify cyber security gaps in existing and proposed projects.
• Recommend Cyber Security changes or enhancements and drive implementation
• Manage and cultivate the defined security services and the relationship to our service providers
• Participate in organizational Security projects, as required
• Support in development processes, and procedures for the team
• Assist correlating alerts, implementing monitoring Use Cases
• Provide implementations, recommendations for protecting and resolving threats and incidents
• Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security
• Manage and support in major Cyber Security Incidents
• Support in 24/7 shifts rotation in the future
• Act as a technical Lead role model in the team on driving initiatives and projects

The Cyber Security Analyst will play a critical role in safeguarding the organisation's digital assets by monitoring, analysing, and responding to potential cyber threats and incidents. This position ensures the integration and alignment of operational and tactical security measures to support the organisation's strategic objectives. The analyst will collaborate with external security service providers to oversee the effectiveness of outsourced operations, and assist with some local IT support activities. Additionally, the role advises on security improvements, provides technical and security advice to other departments and the local office and maintains up-to-date knowledge of emerging cyber threats and technologies.

Your key tasks 

• Data Collection: Identify and gather relevant data from multiple internal and external sources, including logs, databases, APIs, and third-party security tools (e.g., Splunk, Tenable and others).
• Data Integration: Clean, process, and integrate data from disparate sources to ensure accuracy and consistency.
• Analysis and Interpretation: Perform exploratory data analysis to uncover patterns, trends, and anomalies in security data.
• Automation: Develop automated processes for data extraction, transformation, and loading (ETL) to improve efficiency and reduce manual effort.
• Dashboard and Report Creation: Design, build, and maintain interactive dashboards and reports using tools such as Apache Superset, Grafana, or similar platforms.
• Stakeholders Interaction: Collaborate with internal stakeholders to understand their security reporting needs and customize solutions to meet their requirements.
• Security Insights: Generate actionable insights and recommendations to improve clients' security measures based on data analysis.
• Collaboration: Work closely with engineers, architects, digital intelligence, and other stakeholders to ensure alignment and accuracy in reporting.
• Documentation: Maintain clear and comprehensive documentation of data sources, methodologies, and processes.

LOCATION: Cebu or anywhere in the Philippines

Key Responsibilities:  

• Monitor and manage day-to-day security alerts and incidents detected on QIMA anti-malware solutions. 

• Contain and remediate, escalated security incidents by working with IT support, IT Infrastructure, and/or Applications team. Document and implement changes to prevent potential recurrence. 

• Perform security event and network log analysis to identify other indicators of compromise across the QIMA environment.  

• Regularly review and develop strategies and procedures to handle security incidents ensuring that the QIMA incident response plan is up to date. 

• Maintain QIMA Business Continuity and Disaster Recovery Plans, and ensure that regular testing of plans are conducted based on agreed frequencies. 

• Perform regular security vulnerability assessment against QIMA applications and infrastructure. Document and report findings to the applicable teams (IT Infrastructure/Application Development Teams) to drive the completion on patching and remediation based on aligned SLAs. 

• Ensure compliance with legal and regulatory requirements, and internal and external audits related to information security. Assist in providing evidence to support QIMA’s compliance to any audit requirements. 

• Create and present regular reports on all deliverables stated to be presented to the Head of Information Security. 

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?

This security engineering position will be part of a skilled and highly functioning team where there is a lot of opportunity and enhance existing skills or learn new ones. This role will help troubleshoot, maintain, and act as subject matter experts for our Managed Security Services clients. This role will be supporting a variety of security controls across multiple technology platforms.

About the team:

Managed Security Services (MSS) Border Protection Team is responsible for the following MSS services:

• Firewall Management

• VPN Management

• MFA

About the role:
As an IT Security Analyst with FIS, your skills will be put to the test on the front lines of cyber-crime. Information security is at the heart of fintech and you’ll help protect and secure highly-sensitive financial data for customers around the world.

What you will be doing:

• Implementing information security controls and preventing hackers from infiltrating company information and jeopardizing programs.

• Maintaining and controlling access to security systems and utilizing applicable encryption methods to maintain the company's firewall.

• Working with the user community to understand security needs.

• Proactively handles security vulnerabilities and responds to active threats

• Maintenance, configuration, and deployment of NGFW including but not limited to: Cisco ASA, Fortinet, Palo Alto

• Log analysis and troubleshooting

• Deep understanding of routing and switching technologies, security best practices, L2/L3 networks, Ipv4, NAT, BGP, IPSec, Policy-based routing

• Communicating and working effectively with cross functional teams to deliver solutions.

• Reviewing and Implementing Firewalls in line with company and security best practices

• Experience with project-based work and assisting with customer escalations  

• Experience with scripting technologies and centralized deployment preferred but not required

What you will bring:

• Knowledge of network and security technologies.

• Experience with network design and engineering.

• A bachelor's in computer science or a related field, or the equivalent experience.

• Firewall Management experience

• Broad IT skillset

• Understanding of network flow

• IT fundamentals

• Security fundamentals

• Technical Troubleshooting

Added bonus if you have:

• Previous Security Experience

• Fortigate, Cisco ASA, or Palo Alto Experience

#LI-CV1

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Primary Responsibilities:

• Managing daily security and SD-WAN operational activity, such as but not limited to:
  • Lead and coach the Tier 2 security and SD-WAN group that primarily deald with complex enhanced data services, such as Fortinet security/SD-WAN/LAN/WAN/Wi-Fi, VeloCloud/VMware/Broadcom SD-WAN/LAN/WAN, and Meraki security/SD-WAN/LAN/WAN/Wi-Fi.
  • Complete annual and ad hoc personnel performance evaluations.
  • Train and educate personnel on trouble ticket resolution, communication, ticket prioritization, and follow-up improvement opportunities.
  • Organize and host weekly or bi-weekly training sessions with specifically selected personnel to ensure all technicians can perform to the required standard, and to ensure they maintain existing, or gain new, industry certifications.
  • Ensure that established processes, procedures, policies, troubleshooting/resolution guides, and troubleshooting/resolution walkthroughs are followed.
  • Identify documentation that is required but not present, or requires an update, and assign resources for its completion.
  • Apply continual oversight to all open trouble tickets assigned to Tier 2 security and SD-WAN technicians, throughout the ticket life cycle, to ensure:
    • Timely interaction takes place
    • Ticket resolution is achieved in an appropriate amount of time
    • Communication is detailed, frequent, informative, and correct
    • Customers and agents are pleased with the outcome and level of engagement
    • Detailed and correct root cause data is gathered, per ticket, which is critical information that assists AireSpring in improving the customer experience on a go-forward basis and to eliminate, reduce, or shorten, future similar or related tickets.
  • Review individual and overall key performance indicators, SLAs, SLOs, and provide corrective actions to remedy deviations prior to becoming problems.
  • Assist technicians in their ongoing work on open trouble tickets with the goal to improve the customer experience and reduce the duration of the ticket.
  • Identify patterns where ticket activity can be eliminated or reduced via education, training, improved or additional documentation, process changes, and/or tool enhancement.
  • Act as the primary escalation point of contact for issues raised beyond the technician level and own a timely path to resolution and communication related to the escalation.

At Globe, our goal is to create a wonderful world for our people, business, and nation. By uniting people of passion who believe they can make a difference, we are confident that we can achieve this goal.

Job Description

• Assist in creating and updating information security policies, procedures, and guidelines

• Research and assist in reviewing of compliance against cybersecurity regulatory requirements

• Assist in conducting reviews on processes and procedures to identify compliance against industry frameworks

• Participate in audit programs including creation, execution of test plans to determine effectiveness of controls

• Participate in conduct of privacy and security risk assessments

• Assist in effective management of Vendor risks

• Support activities to maintain or obtain industry certifications (ISO 27001, PCI-DSS etc.)

Make Your Passion Part of Your Profession. Attracting the best and brightest Talents is pivotal to our success. If you are ready to share our purpose of Creating a Globe of Good, explore opportunities with us.

As a Senior Cyber Security Analyst,

You will safeguard our infrastructure and users, minimizing risks posed by cyber threats. You will promptly and effectively handle cyber attacks and data breaches, ensuring minimal recurrence of incidents.

Some of the things we expect you to do are to:

• Assist in monitoring company compliance to IT security policies.
• Assist with incident response and execution of company security incident response plan.
• Monitor and manage security events and alerts from a variety of sources (Azure, Defender, Keeper, Cloudflare etc).
• Assess and mitigate CVE’s and CVSS’s from multiple threat intelligence sources.
• Monitor threat intelligence and ensure risk mitigation and communication through the company where necessary.
• Assist with cybersecurity and phishing training for staff.
• Assist in maintaining and implementing GPO policies in Azure.
• Implement Identity Management via SSO across all MS Azure compliant tools used by the business.
• Works with Network Specialist to manage and monitor VPN and firewall rules.
• Works with System Administrator manage and monitor Azure.
• Ensure that IT security audits are conducted periodically or as needed.
• Assist in the development and maintenance of the Business Continuity (BC) and Disaster Recovery (DR) plans.
• Assist in development, maintenance and testing of the company’s security incident response plan.
• Develop and understand all testing necessary for a successful BC/DR execution.
• Assist and mentor desktop support and end users when they need to install or learn about new security products and/or procedures.

We would need you to be or have the following:

• Understanding of risk, threats, and vulnerabilities.
• Strong grasp of technical security controls with practical implementation experience.
• Proficiency in Microsoft Intune and Defender.
• Competence in Certificates, MFA (Multi-Factor Authentication), Vulnerability Management, and Penetration Testing.
• Familiarity with the NIST Cybersecurity Framework.
• Experience with Microsoft Active Directory or certification.
• Knowledgeable in incident response principles.
• Familiarity with threat intelligence and frameworks like MITRE ATT&CK.
• Exposure to IS027001 and SOC2 security frameworks.
• Familiarity with different IT domains: Network, Infrastructure, Systems Administration, Software Development, Database Administration, Change Management, Incident Management.
• Prior experience with ISO documentation and standards.

It would be awesome if you are or also have: 

• Strong cybersecurity tooling (MDM, Endpoint protection, IDS, WAF, Password Manager)
• Ability to identify gaps and/or risk exposure in programs.
• Strong problem solving and organizational skills.
• Strong written/verbal communication skills.
• Able to interact with stakeholders in cross-functional teams.
• Good team player interested in sharing knowledge and cross-training other team members and shows interest in learning new technologies and products.
• Ability to create quality documents

Be a part of the Smartsourcing crew

Wrist Service Center is looking for an Information Security Lead. The perfect candidate holds a profound understanding of both GRC and operational aspects of Information Security and is preferably an Information Security Architect. This position will be reporting to the CISO and acting as a team lead for currently 4 local information security Specialists at the Manilla office, while also conducting tasks related to the field. The position will be closely working with HQ Security in Denmark. The entire Manilla team is considered part of the Information Security department, led by the CISO.  

As this security team in Manilla is only just being established, the entire team will take part in defining the capabilities of the team – naturally in collaboration with the HQ Security team and the CISO himself. 

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: https://bit.ly/SR_WSCCareers

What you'll be doing:

Lead the Information Security Team at the Manila office

• Define and align initiatives and tasks with the CISO
• Assist the CISO in 
  • Ensuring high work satisfaction among the Manilla Team
  • Ensuring the Manilla team is trained.
  • Managing our backlog and sprints.
• Define the capabilities of the information security department.  

Risk Management 

• Assist in ensuring quality and necessary pace in assessments. 
• Conduct and review Risk Assessments. 
• Monitor/Audit risks and controls 
• Take the top lead on Third-Party Risk management

Operational Security

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Take part in managing our Vulnerability Management. 
• Assess Security Architecture 

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, Security+, ISO27001, CISM, CRISC is a plus
• Great English communication skills
• Proven leadership experience
• Knowledge in:
  • Risks management
  • Third-Party Risk Management
  • Control Management
  • Frameworks like ISO 27001/27002/27005, NIST 800-53, NIST CSF, etc. 
  • Defining policies and procedures
  • Network Security
  • Cloud Security (Azure) 
  • MDR/SIEM/Log Analytics 
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
• Not afraid to challenge the CISO on professional aspects

Location: Times Plaza Building, U.N. Avenue corner Taft Avenue, Manila City

Work setup: On-site

Wrist Service Center is looking for an Information Security Specialist who will focus on operational security. You will hold profound skills within all or some of the belove areas:

• Network Security
• Information Security Architecture
• Cloud Security (Azure)
• MDR/SIEM/Log Analytics
• Incident Response
• Vulnerability and Penetration Testing
• Identity and Access management (IAM)
• Technical Security and Risk assessments
• Disaster Recovery Planning

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: LINKS

What you'll be doing:

Define technical requirements for the organization

• Assist in conducting security and risk assessments as well as technical audits to identify vulnerabilities and ineffective controls.
• Utilize frameworks and active scanning to identify potential for improvements.
• Assist in prioritizing technical initiatives
• Depending on the area, assist in implementing or configuring security controls.

Handle security incidents and incoming tasks from the organization (Tickets)

• Take part in our team's responding to security alerts and security incidents.
• Consult with the organization  

Optimize our incidence response capability

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Configure use cases for our detection and response solutions.

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, and Security+, is a plus.
• Great English communication skills
• Knowledge in:
  • Network Security
  • Cloud Security (Azure)
  • MDR/SIEM/Log Analytics
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
  • Mitre ATT&CK and D3FEND

#1 PH Workforce Delivering to the US.

MedCore Solutions, is seeking for a USRN Telehealth Nurse (Permanent Work from Home) to join our growing team ASAP. MedCore allows the best talent in PH to work remotely from home with the latest technology and resources. We are partnering with some of the largest healthcare platforms in the world.

MedCore allows the best talent in PH to work remotely from home with the latest technology and resources. We are partnering with some of the largest healthcare platforms in the world. If you are passionate about patient care, and looking to advance your career with an industry leader, we encourage you to apply today! The traditional model of the office workforce has been shifting as outsourcing has grown in PH at rates never before seen. As global businesses rise out of the pandemic, labor markets have not only tightened but the inflationary rates have caused companies to look for solutions on how to best deliver skilled labor services and results. We are proud to partner with PH and deliver qualified, professional workers, giving our employees the ability to have an unbeatable career and work from home.

Who We Are

MedCore Solutions (MCS) is a single source solution for Healthcare administration. MCS is an industry leader for medical billing, credentialing, scribing, insurance verification, compliance and virtual staffing.

We offer an expansive suite of administrative products and trainings to keep your practice and its employees safe and up to date with compliance and to avoid fines and litigation. Our online compliance center is quick and easy to use, and provides you with an extensive library of training courses, covering OSHA, HIPAA, Human Resources, Health Plan Management, Patient Safety and Regulations, Infection Control, and much more.

Other Details:

Possible start date will be in 2 weeks

8 hour shift Monday-Friday (graveyard shift)

Weekend days off

What You'll Do

• Manage patient calls to the nurse line regarding urgent appointments, medication refills, care instructions and a variety of other concerns
• Accurately document all communications in patient’s EMR
• Communicate with providers regarding appropriate patient care and advise patients of care instructions
• Maintains privacy and confidentiality of all patient protected health information according to HIPAA guidelines

• Active USRN License and US Social Security Card is a MUST
• Must be PH Based
• A detail oriented, multitasker who is passionate about patient care
• Amenable to work in US hour time (graveyard shift)
• An eager people-person who enjoys helping others over the phone
• An excellent communicator who is equally well written and well spoken
• Strong commitment to high level customer service.
• Previous experience working with health insurance, or a health care environment is preferred
• One-year practical work experience in a call center or equivalent customer service environment
• A self-motivated problem solver who works well within a team and also on their own
• Technologically savvy and able to learn multiple computer systems easily
• Adaptable, patient, organized and a critical thinker

Our Commitment to delivering high-quality results for our clients and the only way to do that is ensuring a rewarding, respectful and productive experience for our employees. We hold the same values for both our customers and our employees.

Permanent Work From home

Permanent Weekends Off

Great Company Culture and No Micromanagement

DISCLAIMER: This job posting is intended for the active pooling of candidates who will become part of our talent pool. Your qualifications will be assessed against both current and future job openings. Should your application align with a role that corresponds to your skills and experience, and an opportunity arises, our recruitment team will reach out to you immediately. Please note that this does not guarantee immediate placement or contact. Additionally, we exclusively consider applications from individuals who are Philippine citizens and currently reside in the Philippines during their application process.

Responsibilities

• Oversee the company's IT systems, including hardware, software, and networks.
• Ensure the reliability, security, and efficiency of all IT systems.
• Manage technology projects from conception to completion.
• Develop and enforce IT policies and procedures.
• Analyze the needs of the company's different departments for IT support.
• Collaborate with other departments to identify opportunities for IT-based solutions.
• Stay up-to-date with the latest trends and technologies in the IT field.

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in technology or IT risk management; experience in a supervisory capacity is a plus but not required.
• Strong knowledge of firewalls, endpoint security, mobility management, vulnerability scanning, and network and system security protocols.
• Experience with cloud-based solutions (e.g. AWS, Azure, Google Cloud), project management tools, and methodologies.
• Proficient in programming languages (e.g. Python, Java, C).
• Excellent communication and problem-solving skills.

• Develop and maintain IT Audit and Risk assessments for departments, under the guidance of our Cybersecurity/GRC Manager
• Review impacts of changes pre/post-implementation to our system to maintain or improve our security posture
• Evaluate and spread the word on controls and policies to drive compliance, and provide feedback to various security/compliance committees
• Develop material and coordinate with vendors on information security training and awareness
• Disseminate security communications across the organization as required
• Collect evidence for purposes of audit and compliance
• Assist with assessing the security posture of third-party vendors and suppliers
• Guard Sleek from internal/external threats. Raise and respond to security incidents reported, and communicate with committees to initiate DR/BCP if necessary
• Report and track incidents raised in SIEM and other sources
• Aid the proper classification and rating of risk items
• Initiate regular improvement drives for security across departments

Role Description 

The IT Security Officer serves as the process and policy owner related to the availability, integrity and confidentiality of customer, business partner, employee and business information/data. A key element of the IT Security Officer’s role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. 

Key functions 

• Security Operations:
• own  and drive security education and security awareness programs across the organization
• own, drive and continuously improve security processes, policies and tooling 
• real-time analysis and triage of security threats and incidents
• proactively educate and inform executive management of developing security threats
• develop, implement and execute a strategic, comprehensive enterprise information security and IT risk management program 

• Application Security:
• introduce application and infrastructure security monitoring processes and tooling 
• design and manage and run application and infrastructure security testing (internally and with 3rd parties)

• Security governance: 
• make sure that security related initiatives are understood and funded 
• lead and drive future company security certification programs 
• represent the company security in front of technology partners 
• conduct internal technical and organizational audits 
• manage and support external audits 
• manage, handling and resolve security incident response cases

• degree in business administration or a technology-related field required 
• 5+ years of hands-on IT security experience 
• experience in risk management, information security and IT security
• knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• knowledge of PCI-DSS requirements for merchants working with BSP supervised financial institutions 
• excellent written and verbal communication skills and high level of personal integrity and empathy 
• innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• experience with contract and vendor negotiations and management including managed services

Salary: P50,000 to P70,000 (Monthly Package)

Schedule: Monday – Friday (09:00 AM - 06:00 PM AEST)

What are we looking for?

Skills Required:

• Bachelor’s degree in any related field
• Must be XERO certified
• Competent with Excel and Google Worksheets
• Knowledgeable in Bank Reconciliation
• Knowledgeable in Credit Card Reconciliation

Nice to Have:

• Other accounting/bookkeeping softwares
• MS Office
• Experience in AU Bookkeeping/ Accounting
• Invoicing

What will you do?

• Work closely with Operations, Sales and Customer Service Teams
• Bank Reconciliation
• Credit Card Reconciliation
• Weekly Payroll for a small team
• Accounts Payable Management
• Accounts Receivable Management (not debt collections)
• Weekly Invoicing
• Weekly Commission Calculations
• Month End Procedures including accruals
• No Direct customer communication required

Join the awesome team and enjoy these benefits & perks:

• Work from home setup
• Medical, Dental Coverage and Life insurance from day 1 of employment
• Paid Vacation and Sick Leave (with Quarterly Sick Leave Conversion)
• Competitive salary package and annual appraisal
• Financial Assistance Program
• Mandatory Government Benefits and 13th Month Pay
• Complimentary Sleeping Quarters, Coffee at no cost
• Complimentary Office Fitness and Wellness Facilities at no cost
• Regular Company Events, Work Life Balance, and Career growth opportunities
• Accessible location at the heart of Metro Manila --- the Mega Tower, EDSA

JOIN CONNECTOS NOW!

ConnectOS is certified as a Great Place to Work and is a top-rated Philippines employer of choice.

Our client specialises in providing industry leading renewable energy generation and storage solutions for residential and commercial customers, Australia wide. Trusted specialists with 20+ years of experience – they have installed over 5,000 systems Australia wide; having been trusted by customers installing and maintaining systems for homes, government, business, and community groups across Australia.

#ConnectOS #ConnectOSCareers #TeamConnectOS

Equal Employment Statement

Employment decisions at ConnectOS will be conducted without consideration of factors such as age’, race, color, religion, gender, disability status, sexual orientation, gender identity or expression, genetic information, and marital status. ConnectOS ensures the full confidentiality of the data it processes.

Control Risks is currently looking for an experienced Security Director to be embedded with our client, a large multinational company, based in Mindanao, Philippines. This role will play a key part in the ongoing development of the client’s holistic security programme.

The Security Director will lead the security function and assume responsibility for the delivery of the security programme specific to the client's operations. The Security Director is tasked with the development of the security plan, which will assess threats, risks and resources. They will also coordinate security and incident training for local security officers. The Security Director will work closely with leaders from across the business, including Supply Chain, HR, Legal, IT, and Compliance areas. Effective engagement with third party security providers and government agencies is also required.

This position will be hired as an initial 1-year contract, with scope for further extension.

Responsibilities will include:

• Work with leadership team to analyse security threats and risks to the client's people and business. Implement security mitigation plans and establish relevant countermeasures. Escalate higher-level risks as required.
• Work with relevant teams to communicate security advice to travellers operating in high-risk locations.
• Work with business leaders to develop Incident Management plans. Support implementation of incident management framework.
• Oversee and ensure proper performance of the third party security guard companies engaged by the client.
• Create/update the security framework and ensure it is applied effectively.
• Conduct security risk assessments to validate effectiveness’ of security controls (people, processes and technology).
• Lead the implementation of effective and cost-efficient holistic security solutions.
• Conduct a physical security Risk Assessment for new sites or post major refurbishment, use or occupancy change, and major change to threat assessment.
• Understand and apply the full range of corporate investigative capabilities, whilst ensuring their lawful application.
• Coordinate and deliver security capability training required by employees, security teams and third-party partners.
• Possess contractual assessment skills for the implementation and review of security contracts.
• Prepare reports including security incident reporting, intelligence briefings, threats assessments and investigative reports.
• Utilise an active regional security network to share security information, trends and evolving operational practice. Participate in industry forums and understand emerging security technologies.

• 10+ years' experience in corporate security roles.
• Experience in a significant leadership role.
• Experience working within large complex corporate environments
• Strong English language skills and the ability to develop influential relationships with stakeholders at all levels of an organisation.
• Proficient IT (Microsoft Suite) skills.

Desired:

• Experience in developing and delivering training
• Experience working in the Philippines with insight into local working practices and cultures.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

Hi! We’re Smartsourcing, and we’re looking for a Azure Administrator who can work with us full-time and on-site!

Where?