Information Security Specialist
Information Security Specialist
MicroSourcing International- Posted 10 days ago
- Be among the first 10 applicants
Job Description
Role Summary
The Information Security Specialist is responsible for strengthening MicroSourcing's cybersecurity baseline and operational resilience. Acting as a hybrid bridge between Governance, Risk & Compliance (GRC) and Hands-on Security Operations, this role ensures the organization adheres to strict international standards, regulatory mandates, and client security commitments.
What You'll Do
What We're Looking For
About MicroSourcing
With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.
Our commitment to 100% YOU
MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.
At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!
For more information, visit https://www.microsourcing.com/
The Information Security Specialist is responsible for strengthening MicroSourcing's cybersecurity baseline and operational resilience. Acting as a hybrid bridge between Governance, Risk & Compliance (GRC) and Hands-on Security Operations, this role ensures the organization adheres to strict international standards, regulatory mandates, and client security commitments.
What You'll Do
- Audit & Compliance: Support internal/external audits (ISO 27001, SOC 2, PCI DSS), gather evidence, and track remediation.
- Security Operations: Monitor EDR/XDR, SIEM, and vulnerability scanners, respond to security alerts, and support incident handling.
- Risk & Governance: Perform risk assessments, evaluate vendor security, maintain risk registers, and support our ISMS.
- Security Awareness: Drive security campaigns, phishing simulations, and employee training.
- Stakeholder Coordination: Collaborate with IT, HR, Operations, clients, and auditors to align on security requirements.
What We're Looking For
- 2–4 years of experience in InfoSec, IT Audit, GRC, or SecOps.
- Degree in IT, Computer Science, Cybersecurity, or a related field.
- Working knowledge of ISO/IEC 27001, SOC 2, PCI DSS, or NIST CSF.
- Strong analytical, documentation, and cross-functional communication skills.
- Experience in a BPO, IT Enabled Services (ITES), or Managed Services environment.
- Familiarity with the Philippine Data Privacy Act (DPA).
- Certifications like CompTIA Security+, ISC2 CC, or ISO 27001 Internal/Lead Auditor.
- Hands-on experience with GRC tools (Vanta, OneTrust, Archer) or modern SecOps monitoring tools.
About MicroSourcing
With over 9,000 professionals across 13 delivery centers, MicroSourcing is the pioneer and largest offshore provider of managed services in the Philippines.
Our commitment to 100% YOU
MicroSourcing firmly believes that our company's strength lies in our people's diversity and talent. We are proud to foster an inclusive culture that embraces individuals of all races, genders, ethnicities, abilities, and backgrounds. We provide space for everyone, embracing different perspectives, and making room for opportunities for each individual to thrive.
At MicroSourcing, equality is not merely a slogan – it's our commitment. Our way of life. Here, we don't just accept your unique authentic self - we celebrate it, valuing every individual's contribution to our collective success and growth. Join us in celebrating YOU and your 100%!
For more information, visit https://www.microsourcing.com/
More Info
About Company