Information Security Specialist (PH) -Onsite

We are seeking a detail-oriented Information Security Specialist to support compliance initiatives and certification audit projects. This role is primarily focused on Information Security Governance, Risk, and Compliance (GRC) rather than hands-on IT or cybersecurity operations.

The successful candidate will play a key role in maintaining security compliance frameworks, supporting certification audits, and ensuring the organization remains aligned with international security standards and regulatory requirements.

• Support the implementation and continuous improvement of ISO 27001 and ISMS (Information Security Management System) frameworks.

• Participate in and support certification and audit projects, including ISO 27001, SOC 1, SOC 2, and other relevant standards.

• Assist in preparing and maintaining compliance documentation, risk assessments, and internal control reviews.

• Coordinate with internal stakeholders to ensure audit readiness and compliance alignment across departments.

• Collaborate with international teams and external auditors during audit cycles and assessments.

• Monitor compliance gaps and recommend improvements to strengthen security governance practices.

• Basic to intermediate knowledge of ISO 27001 and ISMS frameworks.

• Hands-on experience participating in certification audits such as ISO 27001, SOC 1, SOC 2, or similar standards.

• Strong background in Information Security Governance, Risk, and Compliance (GRC) (non-operations focused).

• Experience working with international or global organizations is preferred.

• Strong written and verbal communication skills.

• High attention to detail with strong organizational and documentation skills.