IT Security QA

<h2>Job Description:Security Assurance:</h2><ul>
<li>Conduct regular security assessments, including vulnerability scans, penetration tests, and risk assessments to identify and mitigate security risks.</li>
<li>Develop, implement, and maintain security policies, procedures, and controls to ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, NIST, ISO 27001).</li>
<li>Perform security reviews and audits of internal and third-party systems to ensure adherence to security best practices.</li>
</ul><h2>Security Engineering:</h2><ul>
<li>Ensure to implement security solutions and technologies to protect against cyber threats and vulnerabilities.</li>
<li>Collaborate with IT and development teams to integrate security into system design, application development, and deployment processes.</li>
<li>Investigate and respond to security incidents, including conducting forensic analysis and coordinating with incident response teams.</li>
</ul><h2>Compliance and Risk Management:</h2><ul>
<li>Stay current with emerging security threats, technologies, and industry trends to continuously improve security posture.</li>
<li>Support and preparation and submission of compliance reports and documentation for audits.</li>
</ul><h2>Reporting:</h2><ul>
<li>Generate and present regular security reports and metrics to senior management, highlighting key security events, trends, and the effectiveness of security measures.</li>
<li>Document security incidents, including the nature of the threat, response actions, and outcomes.</li>
<li>Prepare and submit compliance reports and documentation for audits, ensuring accurate and timely reporting of security posture and incidents.</li>
</ul><h2>Collaboration and Communication:</h2><ul>
<li>Work closely with cross-functional teams to address security-related issues and implement effective solutions.</li>
<li>Provide expert guidance and recommendations on security matters to senior management and other stakeholders.</li>
<li>Document and communicate security findings, recommendations, and status to relevant parties.</li>
</ul><h2>Requirements</h2><h2>Qualifications:</h2><ul>
<li><strong>Minimum of 5 years of experience in IT security, information assurance, or a related field.</strong></li>
<li>Strong understanding of<strong>security frameworks</strong>and standards such as<strong>ISO 27001, NIST, GDPR, and HIPAA.</strong>
</li>
<li>Hands-on experience with<strong>security assessments</strong>, including<strong>vulnerability scanning, penetration testing, and risk assessments.</strong>
</li>
<li>Solid background in<strong>security engineering</strong>, with the ability to implement security tools, technologies, and solutions.</li>
<li>Proficient in conducting<strong>security audits</strong>and reviews of internal and third-party systems.</li>
<li>Experience working with cross-functional teams to integrate security into software development and IT operations.</li>
<li>Strong knowledge of<strong>incident response procedures, forensic analysis, and mitigation strategies.</strong>
</li>
<li>Familiarity with compliance reporting and audit preparation.</li>
<li>Excellent report writing and communication skills, with the ability to present findings and metrics to senior management.</li>
<li>Up-to-date with emerging threats, technologies, and best practices in cybersecurity.</li>
<li>Strong analytical and planning skills;</li>
<li>Good communication and presentation skills;</li>
<li>Excellent problem-solving skills;</li>
<li><strong>Amenable to work in Ortigas (fully onsite)</strong></li>
</ul>