security and ComplianceTASQ Staffing Solutions

Job Description
Establish, maintain, monitor and improve the Information Security Management System (ISMS) by following ISO 27000 family, and also meet compliance requirements such as SOC2, HIPAA, PCI-DSS, GDPR, etc.
Monitor security policies, processes and procedures to ensure compliance with Client security requirements and applicable government legal and regulations
Develop best practices and security standards; implement security improvements by assessing current situations, evaluating trends and maintaining security controls
Determine security violations and inefficiencies by conducting periodic security audits to identify potential vulnerabilities related to asset protection, ensure operational security controls are implemented and maintained properly
Recognize problems by identifying abnormalities, respond immediately to security incidents, come up with post-incident analysis and reporting security violations
Report non-conformity issues to the management and propose countermeasures for those issues to renovate the organization and operation of the Company in order to continuously improve the efficiency of business
Evaluates security trends, evolvement of threats, vulnerabilities, and performs risk assessment and treatment plan; coordinate with related parties for consulting on remediation
Develop and improve business continuity planning and disaster recovery procedures
Develop and train employees for security awareness with best practices and company regulations/policies
Qualifications
Minimum of one (1) year of experience in the IT Security compliance in medium or enterprise level. Prefer to banking, financial, auditing or internal control firms.
Having actual knowledge in ISO 27000 family, SOC2, GDPR, CSA (Cloud), HIPAA, PCI-DSS is an advantage
Demonstrate ability to work independently and as part of a team to achieve team goals
Demonstrate strong organizational skills, including time management and ability to prioritize and manage a range of tasks pro-actively
Demonstrate good logical thinking and problem-solving skills
Ability to effectively prioritize, take ownership and execute tasks in a high-pressure environment
Highly motivated, self-directed
Good at English in communication skills including oral and written
Having knowledge of Information and Cyber Security Management is a plus
Education/Training Preferred
Bachelors degree in Computer Science, Auditing, Business Administration and Operations Management related field or equivalent work experience
Certification of CISA, CISM, CISSP or other equivalent certificates is an advantage
Lead Internal Auditor certificate is a plus
TASQ Staffing Solutions

Pasig City, Metro Manila
Permanent
Full-time