9 Security Breaches jobs in the Philippines
Computer Security Incident Response Team ( CSIRT ) Consultant
Muntinlupa, National Capital Region
ETeam PH
Posted 7 days ago
Job Viewed
Job Description
Description:
We believe technology should help you achieve more. And we help businesses do exactly that almost daily — co-creating innovative connected products, rapidly and securely deploying apps in the cloud, managing employee-owned devices on a global scale, and deflecting sophisticated hacker attacks. In support of our world leading position in Cyber Security, we have recently launched a new service, the Computer Security Incident Response Team ( CSIRT ) br>
Our newly offered service will include a designated CSIRT Consultant full time or as a shared resource, who will work as a contact and communications point between our security services team and customers’ security and IT staff as well as users and other important partners. You will also be responsible for operating the incident management process in accordance with the procedures designed in cooperation with customers. < r>
On a day to day basis, you will assist with, identify and respond to incidents as well as proactively propose improvements for how to reduce risk and potential future incidents.
Receiving and monitoring incident information from our managed security services and other sources.
Reviewing the collected incident data and confirming or rejecting incidents based on the analysis.
Classifying and prioritizing incidents based on established criteria.
Facilitating communication between stakeholders of the incident status.
Coordinating the containment effort based on the available information and established processes.
Performing vulnerability management using the Qualys tool.
Making containment decisions and facilitating decision making by other parties using established escalation processes.
Communicating with affected users and partners to organize the containment effort.
Verifying the effectiveness of containment actions taken.
Identifying the attack vector used by incident and taking actions to confirm that similar incidents are prevented in the future.
Validating the effectiveness of the eradication actions.
Coordinating forensics and law enforcement activities with officials as necessary.
Analyzing the incident response effort, with feedback from the customer and third parties.
Conducting proactive management of the Monitoring and Analytics solution.
You'll need to have:
Bachelor's degree or 3 or more years of work experience.
3 or more years of relevant work experience in Security
Knowledge of Network and Web Application vulnerability assessments.
Even better if you have one or more of the following:
2 or more years of work experience in Security incident detection or Security incident management.
Demonstrated strong communication skills and the capability to engage with customers at both technical and executive levels.
Strong problem-solving and security analytics skills and the ability to identify gaps in processes and recommend improvements for mitigation.
Four or more years of experience in security operations, risk management, operational management, and/or consultant management.
CSIRT experience.
Experience structuring and operating an efficient Incident Response process.
Knowledge of common types of malware, their infection vectors, how to identify them using network and host based tools, and how to eradicate them and verify the success of eradication efforts.
Knowledge of current security threats and vulnerabilities and how to detect and mitigate them, and the ability to understand their possible consequences on the customer’s environment. < r>
Understanding of modern technologies used to detect malware and vulnerabilities and protect assets.
SIEM (SPLUNK) and log analytics skills.
SANS or other Security certifications, such as GCIA, GCIH, GREM, GPEN, CEH.
CISSP certification and/or CISM certification.
ITIL Foundations training/certification.
Knowledge of ISO 27001 requirements.
We believe technology should help you achieve more. And we help businesses do exactly that almost daily — co-creating innovative connected products, rapidly and securely deploying apps in the cloud, managing employee-owned devices on a global scale, and deflecting sophisticated hacker attacks. In support of our world leading position in Cyber Security, we have recently launched a new service, the Computer Security Incident Response Team ( CSIRT ) br>
Our newly offered service will include a designated CSIRT Consultant full time or as a shared resource, who will work as a contact and communications point between our security services team and customers’ security and IT staff as well as users and other important partners. You will also be responsible for operating the incident management process in accordance with the procedures designed in cooperation with customers. < r>
On a day to day basis, you will assist with, identify and respond to incidents as well as proactively propose improvements for how to reduce risk and potential future incidents.
Receiving and monitoring incident information from our managed security services and other sources.
Reviewing the collected incident data and confirming or rejecting incidents based on the analysis.
Classifying and prioritizing incidents based on established criteria.
Facilitating communication between stakeholders of the incident status.
Coordinating the containment effort based on the available information and established processes.
Performing vulnerability management using the Qualys tool.
Making containment decisions and facilitating decision making by other parties using established escalation processes.
Communicating with affected users and partners to organize the containment effort.
Verifying the effectiveness of containment actions taken.
Identifying the attack vector used by incident and taking actions to confirm that similar incidents are prevented in the future.
Validating the effectiveness of the eradication actions.
Coordinating forensics and law enforcement activities with officials as necessary.
Analyzing the incident response effort, with feedback from the customer and third parties.
Conducting proactive management of the Monitoring and Analytics solution.
You'll need to have:
Bachelor's degree or 3 or more years of work experience.
3 or more years of relevant work experience in Security
Knowledge of Network and Web Application vulnerability assessments.
Even better if you have one or more of the following:
2 or more years of work experience in Security incident detection or Security incident management.
Demonstrated strong communication skills and the capability to engage with customers at both technical and executive levels.
Strong problem-solving and security analytics skills and the ability to identify gaps in processes and recommend improvements for mitigation.
Four or more years of experience in security operations, risk management, operational management, and/or consultant management.
CSIRT experience.
Experience structuring and operating an efficient Incident Response process.
Knowledge of common types of malware, their infection vectors, how to identify them using network and host based tools, and how to eradicate them and verify the success of eradication efforts.
Knowledge of current security threats and vulnerabilities and how to detect and mitigate them, and the ability to understand their possible consequences on the customer’s environment. < r>
Understanding of modern technologies used to detect malware and vulnerabilities and protect assets.
SIEM (SPLUNK) and log analytics skills.
SANS or other Security certifications, such as GCIA, GCIH, GREM, GPEN, CEH.
CISSP certification and/or CISM certification.
ITIL Foundations training/certification.
Knowledge of ISO 27001 requirements.
This advertiser has chosen not to accept applicants from your region.
0
Information Security Engineer
Makati, National Capital Region
JK Network Services
Posted 26 days ago
Job Viewed
Job Description
COMPANY PROFILE: Develop significant traveler supplier ties outside of the United States. Known as one of the country's top travel companies.
br>Position: Information Security Engineer
Company Industry: Travel Industry
Work Location: Makati Site, QC, Alabang, Cebu, and Bacolod
Work Schedule: Flexible Schedule, Rotational Shift
Salary: Php 40,000-60,000
Work Set Up: Onsite/Hybrid
JOB REQUIREMENTS:
• Bachelor’s degree in Computer Science, Information Technology, or related fields.
• W th strong verbal and written communication skills, with technical writing experience. < r>• W th relevant certifications is advantage (e.g., CompTIA Security+, GSEC, CEH, CISSP, etc.) < r>• E perience in cloud, network, server and database security < r>
JOB RESPONSIBILITIES:
• O ersee the establishment, dissemination, and regular revisions to CTPI's information security policy. < r>• E sure policies are consistent with developing threats, industry best practices, and standards such as ISO 27001 and SOC 2. < r>• W rk with subject matter experts (SMEs) to identify vulnerabilities in networks, hardware, software, and procedures. < r>• P ovide security solutions and guidance for system and software development in accordance with ISDP policies. < r>• P ovide Level 1 cybersecurity incident response (CIRT), including threat analysis and security event evaluations. < r>• M ke recommendations regarding incident management and mitigation. < r>• P epare and present cybersecurity reports to management. < r>• S ay current on industry developments, technology, and processes to consistently strengthen CTPI's security posture. < r>
RECRUITMENT PROCESS: (ONLINE)
Initial Interview
Technical Assessment
Final Interview
Job offer
br>Position: Information Security Engineer
Company Industry: Travel Industry
Work Location: Makati Site, QC, Alabang, Cebu, and Bacolod
Work Schedule: Flexible Schedule, Rotational Shift
Salary: Php 40,000-60,000
Work Set Up: Onsite/Hybrid
JOB REQUIREMENTS:
• Bachelor’s degree in Computer Science, Information Technology, or related fields.
• W th strong verbal and written communication skills, with technical writing experience. < r>• W th relevant certifications is advantage (e.g., CompTIA Security+, GSEC, CEH, CISSP, etc.) < r>• E perience in cloud, network, server and database security < r>
JOB RESPONSIBILITIES:
• O ersee the establishment, dissemination, and regular revisions to CTPI's information security policy. < r>• E sure policies are consistent with developing threats, industry best practices, and standards such as ISO 27001 and SOC 2. < r>• W rk with subject matter experts (SMEs) to identify vulnerabilities in networks, hardware, software, and procedures. < r>• P ovide security solutions and guidance for system and software development in accordance with ISDP policies. < r>• P ovide Level 1 cybersecurity incident response (CIRT), including threat analysis and security event evaluations. < r>• M ke recommendations regarding incident management and mitigation. < r>• P epare and present cybersecurity reports to management. < r>• S ay current on industry developments, technology, and processes to consistently strengthen CTPI's security posture. < r>
RECRUITMENT PROCESS: (ONLINE)
Initial Interview
Technical Assessment
Final Interview
Job offer
This advertiser has chosen not to accept applicants from your region.
1
Analyst, Information Security
Cardinal Health
Posted 17 days ago
Job Viewed
Job Description
**_What User Access Management contributes to Cardinal Health_**
The User Access Management team is responsible for managing identity and attributes for employees, contractors, customers, vendors, etc.
Ensures compliance with Cardinal Health security requirements for applications in the organization in relation to identity and access.
Analysts within the team ensure the right access to the right applications at the appropriate time through provisioning efforts, IdentityIQ management, SAP, and approval enforcement.
**_Functional Competencies_**
+ Maintain efforts to streamline the user provisioning processes.
+ Improve the transparency of access for our entitlement owners and managers.
+ Serve as the point of escalation from the business and IT; execute the provisioning steps needed to ensure an efficient and compliant process.
+ Partner with application teams to provide security, governance, and provisioning services enterprise-wide.
+ Minimum cross knowledge to provide process improvement of how the ENTIRE team works together to streamline job functions.
**_Activities/accountabilities include the following:_**
+ Partners with application teams to create/streamline provisioning processes.
+ Serve as liaison between business and IT to determine appropriate access for users, including user consultations, SoD checks, and access determination.
+ Able to take a group of users, review the access and identify changes that can be made to ensure consistency and repeatability in provisioning that group.
+ Ensures the consistency and cleanliness of the environments we manage.
+ Ensures all documentation on tasks performed has been updated and published in a shared location.
+ Act as an advocate for access controls and identity access management (IAM) services, ensuring correct/appropriate standards and processes are being adhered to
+ Achieve quality review standards of no repeat errors.
+ Initiate regular reviews of user to role mappings to ensure access meets the security design and security/access related problem resolution.
+ Focus on automation opportunities/improvements.
**_Qualifications_**
+ Application access support/administration
+ Functional experience with security principles, specifically access management.
+ Process improvement and lean principles.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (
The User Access Management team is responsible for managing identity and attributes for employees, contractors, customers, vendors, etc.
Ensures compliance with Cardinal Health security requirements for applications in the organization in relation to identity and access.
Analysts within the team ensure the right access to the right applications at the appropriate time through provisioning efforts, IdentityIQ management, SAP, and approval enforcement.
**_Functional Competencies_**
+ Maintain efforts to streamline the user provisioning processes.
+ Improve the transparency of access for our entitlement owners and managers.
+ Serve as the point of escalation from the business and IT; execute the provisioning steps needed to ensure an efficient and compliant process.
+ Partner with application teams to provide security, governance, and provisioning services enterprise-wide.
+ Minimum cross knowledge to provide process improvement of how the ENTIRE team works together to streamline job functions.
**_Activities/accountabilities include the following:_**
+ Partners with application teams to create/streamline provisioning processes.
+ Serve as liaison between business and IT to determine appropriate access for users, including user consultations, SoD checks, and access determination.
+ Able to take a group of users, review the access and identify changes that can be made to ensure consistency and repeatability in provisioning that group.
+ Ensures the consistency and cleanliness of the environments we manage.
+ Ensures all documentation on tasks performed has been updated and published in a shared location.
+ Act as an advocate for access controls and identity access management (IAM) services, ensuring correct/appropriate standards and processes are being adhered to
+ Achieve quality review standards of no repeat errors.
+ Initiate regular reviews of user to role mappings to ensure access meets the security design and security/access related problem resolution.
+ Focus on automation opportunities/improvements.
**_Qualifications_**
+ Application access support/administration
+ Functional experience with security principles, specifically access management.
+ Process improvement and lean principles.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (
This advertiser has chosen not to accept applicants from your region.
2
Information Security Specialist
San Pedro, Laguna
Yngen Datacom Corporation
Posted today
Job Viewed
Job Description
Develop a comprehensive plan and execute projects to secure the company’s computing network, including on premise and cloud.
- Monitor network data and usage to ensure compliance with security policies.
- Keep up to date with developments in IT security standards and threats
- Establish and maintain the company’s Information Security policies
- Collaborate with senior management, HR, Admin to improve information security
- Document any security breaches and asses their damage
- Create programs to educate colleagues on information security technologies and best practices for information security
**Job Qualifications**:
- Degree in Computer Science or any technology-related field
- With professional information security certification is an advantage
- 1 year of experience in an information security officer role
- Solid knowledge of various information security frameworks
- Effective verbal and written communication skills
- Excellent problem-solving and analytical skills
- Ability to educate a non-technical audience about various security measures
**Salary**: Php25,000.00 - Php35,000.00 per month
Schedule:
- 8 hour shift
- Monitor network data and usage to ensure compliance with security policies.
- Keep up to date with developments in IT security standards and threats
- Establish and maintain the company’s Information Security policies
- Collaborate with senior management, HR, Admin to improve information security
- Document any security breaches and asses their damage
- Create programs to educate colleagues on information security technologies and best practices for information security
**Job Qualifications**:
- Degree in Computer Science or any technology-related field
- With professional information security certification is an advantage
- 1 year of experience in an information security officer role
- Solid knowledge of various information security frameworks
- Effective verbal and written communication skills
- Excellent problem-solving and analytical skills
- Ability to educate a non-technical audience about various security measures
**Salary**: Php25,000.00 - Php35,000.00 per month
Schedule:
- 8 hour shift
This advertiser has chosen not to accept applicants from your region.
3
Information Security Architect (Hybrid)
Blaseek
Posted today
Job Viewed
Job Description
Position Overview:
As a Security Architect, you will engage across various domains within information security, focusing on: br>Evaluating and auditing existing security controls and solutions.
Designing and implementing new security measures.
Providing expert counsel within the department and beyond.
Assisting in the design and optimization of our SIEM/MDR solutions.
Conducting risk assessments for infrastructure, applications, and vendors.
Qualifications:
Bachelor's degree in any field; degrees in Information Security, Computer Science, or Software Engineering preferred but not mandatory.
Certifications such as Azure Architect, Azure Security, OSCP, OSEP, CISSP, Security+, ISO 27001, CISM, or CRISC are advantageous but not required.
Excellent English communication skills.
Knowledge in areas such as:
Risk Management
Third-Party Risk Management
Control Management
Security Frameworks (ISO 27001/27002/27005, NIST 800-53, NIST CSF)
Policy and Procedure Development
Infrastructure and Cloud Security (Azure)
MDR/SIEM/Log Analytics
Incident Response
Vulnerability and Penetration Testing
Identity and Access Management (IAM)
Technical Security and Risk Assessments
Disaster Recovery Planning
Willingness to engage with the CISO on professional matters.
As a Security Architect, you will engage across various domains within information security, focusing on: br>Evaluating and auditing existing security controls and solutions.
Designing and implementing new security measures.
Providing expert counsel within the department and beyond.
Assisting in the design and optimization of our SIEM/MDR solutions.
Conducting risk assessments for infrastructure, applications, and vendors.
Qualifications:
Bachelor's degree in any field; degrees in Information Security, Computer Science, or Software Engineering preferred but not mandatory.
Certifications such as Azure Architect, Azure Security, OSCP, OSEP, CISSP, Security+, ISO 27001, CISM, or CRISC are advantageous but not required.
Excellent English communication skills.
Knowledge in areas such as:
Risk Management
Third-Party Risk Management
Control Management
Security Frameworks (ISO 27001/27002/27005, NIST 800-53, NIST CSF)
Policy and Procedure Development
Infrastructure and Cloud Security (Azure)
MDR/SIEM/Log Analytics
Incident Response
Vulnerability and Penetration Testing
Identity and Access Management (IAM)
Technical Security and Risk Assessments
Disaster Recovery Planning
Willingness to engage with the CISO on professional matters.
This advertiser has chosen not to accept applicants from your region.
4
Information Security Analyst II
Manila, Metropolitan Manila
RELX INC
Posted 13 days ago
Job Viewed
Job Description
Job Scope:
To manage all RX security assessments and play a key part in ensuring RX's security compliance optimization. Monitor assessments while ensuring that Reed Exhibitions internal systems are compliant with RELX and industry standards. Proactively manage the third-party risk assessments, compliance evidence gathering of their IT services, infrastructure, applications and relevant services against their Security policies and related frameworks. Training and development will be provided in all areas of the role as required.
Key Responsibilities:
Security Assessment Management
+ Serve as an advanced technical advisor for third-party assessments, providing detailed security insights and solutions.
+ Perform in-depth security reviews and risk assessments for new and existing third-party vendors, ensuring compliance with organizational and regulatory requirements.
+ Demonstrate advanced knowledge in RELX security compliance policies and procedures.
+ Stay current with updates and developments in security standards such as OWASP Top 10, ISO27001, and SOC 2, and ensure their proper implementation across the organization.
+ Develop and deliver training and awareness on security policies and standards to business units.
+ Gain in-depth knowledge of the organization's major infrastructure security controls, ensuring they align with RELX Policies and Standards, industry best practices, and regulatory requirements.
+ Coordinate with technology/service owners and business owners to conduct annual security audits, vulnerability assessments, and penetration tests where applicable.
+ Work collaboratively within all business areas and key stakeholders to ensure the review and approach of all security governance, risk, and compliance scope is appropriate and proactive.
+ Ensure continuous monitoring and reporting of compliance and risk status against NIST2.0, RELX Framework, ISO27001, SOC2, PCI DSS, regional and global regulations, and all other relevant standards.
+ Support internal and external audits by providing detailed documentation and evidence of security controls and practices.
+ Perform RX Business Unit and Third-Party security audits according to the CISO office strategic plan and produce detailed documentation and evidence against security controls and practices tested.
+ Act as a point of escalation for security-related incidents, providing advanced security support and guidance to Level I Analysts and other team members.
+ Provide regular updates and at least monthly metric reports to senior management on security compliance and risk posture.
+ Escalation of high impact security issues to Security Compliance Manager.
Ideal candidate profile:
Technical Skills:
+ Bachelor's Degree holder.
+ Background in IT, compliance, and/or information security.
+ Ability to work across all levels of seniority within business teams to drive a working partnership.
+ Strong analytical and critical thinking skills.
+ Understanding of industry standards for IT security (e.g., ISO27001/2, SOC 2, PCI DSS).
+ Basic understanding of IT security applications (e.g., firewalls, intrusion detection, virus protection).
+ Understanding of IT security testing and vulnerability management, and Threat Modeling.
+ Understanding in Cloud Environment (e.g., AWS, Azure or GCP)
+ Understanding of Service Level Management.
+ Desired understanding of OneTrust portal or Similar.
+ With CompTIA Security+ or Similar or Higher.
Personal Skills:
+ Ability to work across all levels of seniority within the organization and suppliers to drive a working partnership.
+ Good communication skills at all levels, both oral and written.
+ Good interpersonal skills.
+ Ability to produce effective influence and persuasive arguments in support of security assessment process goals.
+ Highly driven and self-motivated individuals.
+ Skilled in project management and able to work independently in a fast-paced environment.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1- .
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here .
Please read our Candidate Privacy Policy .
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers:
EEO Know Your Rights .
RELX is a global provider of information-based analytics and decision tools for professional and business customers, enabling them to make better decisions, get better results and be more productive.
Our purpose is to benefit society by developing products that help researchers advance scientific knowledge; doctors and nurses improve the lives of patients; lawyers promote the rule of law and achieve justice and fair results for their clients; businesses and governments prevent fraud; consumers access financial services and get fair prices on insurance; and customers learn about markets and complete transactions.
Our purpose guides our actions beyond the products that we develop. It defines us as a company. Every day across RELX our employees are inspired to undertake initiatives that make unique contributions to society and the communities in which we operate.
To manage all RX security assessments and play a key part in ensuring RX's security compliance optimization. Monitor assessments while ensuring that Reed Exhibitions internal systems are compliant with RELX and industry standards. Proactively manage the third-party risk assessments, compliance evidence gathering of their IT services, infrastructure, applications and relevant services against their Security policies and related frameworks. Training and development will be provided in all areas of the role as required.
Key Responsibilities:
Security Assessment Management
+ Serve as an advanced technical advisor for third-party assessments, providing detailed security insights and solutions.
+ Perform in-depth security reviews and risk assessments for new and existing third-party vendors, ensuring compliance with organizational and regulatory requirements.
+ Demonstrate advanced knowledge in RELX security compliance policies and procedures.
+ Stay current with updates and developments in security standards such as OWASP Top 10, ISO27001, and SOC 2, and ensure their proper implementation across the organization.
+ Develop and deliver training and awareness on security policies and standards to business units.
+ Gain in-depth knowledge of the organization's major infrastructure security controls, ensuring they align with RELX Policies and Standards, industry best practices, and regulatory requirements.
+ Coordinate with technology/service owners and business owners to conduct annual security audits, vulnerability assessments, and penetration tests where applicable.
+ Work collaboratively within all business areas and key stakeholders to ensure the review and approach of all security governance, risk, and compliance scope is appropriate and proactive.
+ Ensure continuous monitoring and reporting of compliance and risk status against NIST2.0, RELX Framework, ISO27001, SOC2, PCI DSS, regional and global regulations, and all other relevant standards.
+ Support internal and external audits by providing detailed documentation and evidence of security controls and practices.
+ Perform RX Business Unit and Third-Party security audits according to the CISO office strategic plan and produce detailed documentation and evidence against security controls and practices tested.
+ Act as a point of escalation for security-related incidents, providing advanced security support and guidance to Level I Analysts and other team members.
+ Provide regular updates and at least monthly metric reports to senior management on security compliance and risk posture.
+ Escalation of high impact security issues to Security Compliance Manager.
Ideal candidate profile:
Technical Skills:
+ Bachelor's Degree holder.
+ Background in IT, compliance, and/or information security.
+ Ability to work across all levels of seniority within business teams to drive a working partnership.
+ Strong analytical and critical thinking skills.
+ Understanding of industry standards for IT security (e.g., ISO27001/2, SOC 2, PCI DSS).
+ Basic understanding of IT security applications (e.g., firewalls, intrusion detection, virus protection).
+ Understanding of IT security testing and vulnerability management, and Threat Modeling.
+ Understanding in Cloud Environment (e.g., AWS, Azure or GCP)
+ Understanding of Service Level Management.
+ Desired understanding of OneTrust portal or Similar.
+ With CompTIA Security+ or Similar or Higher.
Personal Skills:
+ Ability to work across all levels of seniority within the organization and suppliers to drive a working partnership.
+ Good communication skills at all levels, both oral and written.
+ Good interpersonal skills.
+ Ability to produce effective influence and persuasive arguments in support of security assessment process goals.
+ Highly driven and self-motivated individuals.
+ Skilled in project management and able to work independently in a fast-paced environment.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1- .
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here .
Please read our Candidate Privacy Policy .
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers:
EEO Know Your Rights .
RELX is a global provider of information-based analytics and decision tools for professional and business customers, enabling them to make better decisions, get better results and be more productive.
Our purpose is to benefit society by developing products that help researchers advance scientific knowledge; doctors and nurses improve the lives of patients; lawyers promote the rule of law and achieve justice and fair results for their clients; businesses and governments prevent fraud; consumers access financial services and get fair prices on insurance; and customers learn about markets and complete transactions.
Our purpose guides our actions beyond the products that we develop. It defines us as a company. Every day across RELX our employees are inspired to undertake initiatives that make unique contributions to society and the communities in which we operate.
This advertiser has chosen not to accept applicants from your region.
5
Chief Information Security Officer (CISO)
1631 Taguig, National Capital Region
Career Connect
Posted 8 days ago
Job Viewed
Job Description
Job Overview: The Chief Information Security Officer works with other executives across different departments to design security systems and assets. The CISO’s main responsibility is creating and implementing an information security program that is designed to protect enterprise communications, systems, and assets from any potential threats. He/She will ensure compliance to legal security practices.Job Description: ● Define and own a multi-year cybersecurity roadmap and key performance indicators focused on reducing cyber risk ● Build and inspire a highly skilled and diverse Cybersecurity team. Foster a culture of trusted cross-functional partnership, service, and continuous improvement ● Create quarterly, annual, and long-term cyber security and cyber risk management goals, articulate strategies, define metrics and provide necessary updates to executive leadership ● Partner with leadership for the development, planning, and execution of major security initiatives. Support Secure Software Development Lifecycle ● Collaborate with the SOC team and ISO 27001 Core team to establish appropriate security standards and provide an effective governance structure to ensure cyber compliance and accountability ● Lead Security Incident Response, Third Party Information Security Assessment, Data Protection and Encryption, ● Identity & Access Management and Privileged User Access to protect customer and employee data ● Define cyber security governance and control strategies for emerging technologies such as cloud & containerization, blockchain, etc. ● Keep well informed of developing security threats, and proactively create strategies to understand and mitigate potential security problems that might arise from acquisitions or other big business moves ● Other job-related activities may be assigned from time to time.RequirementsRequirements: ● Education – At least graduate with a Bachelor’s Degree in IT, Computer Science, Engineering, or any related course. ● Related Work Experience - Key Industry certifications in Information Security, such as CISSP, CISM and CISA ● Knowledge – Knowledgeable in security and operations processes. ● 15+ years of experience in Information/Cybersecurity in a public or large private technology company with a global customer base ● 7+ years people management experience with hands-on experience building diverse teams while promoting an inclusive organization ● A demonstrated knowledge of information security standards (e.g., NIST, ISO-27001), rules and regulations related to information security and data confidentiality (e.g., PCI, NIST, NSA) and other various security standards and policies ● A strong understanding of Cloud Security Mode and key principles, such as CSPs Shared Responsibility Models, Security and Infrastructure as Code, Preventive/Reactive Guardrails, Containerization, Server-less Computing, Continuous monitoring/drift detection, and the importance of end-to-end automation ● Strong interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex topics for understanding and critical decision making by Executive Management and the Board ● Ability to understand not only emerging industry trends as far as cyber security is concerned but also the landscape of emerging threats, making appropriate adjustments within the cybersecurity program
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Security breaches Jobs in Philippines !
6
Information & Cyber Security Lead
Hrtx
Posted 28 days ago
Job Viewed
Job Description
We are looking for an experienced professional to help lead the operations of an Information & Cyber Security Center of Expertise. This role focuses on managing team performance, driving operational improvements, and supporting strategic security initiatives across global teams.
Key ResponsibilitiesOperations & Strategy
- Lead operational initiatives to drive continuous improvement and efficiency.
- Manage stakeholder relationships and oversee transitions of new work.
- Monitor team performance and service delivery metrics.
- Support development and execution of long-term strategies for the security team.
People Management
- Support recruitment, onboarding, and training of team members.
- Coach and mentor managers and act as an escalation point for operational issues.
- Conduct performance reviews and help implement talent development strategies.
Process & Compliance
- Ensure governance and compliance with security frameworks and standards.
- Lead process improvement initiatives using gap analysis and best practices.
- Support capacity planning and resource allocation.
- Bachelors degree in Business, IT, or a related field.
- Minimum of 7 years of experience, including 5 years in operations or service delivery management.
- Proven experience in leading large teams and managing diverse operational functions.
- Strong problem-solving, communication, and relationship-building skills.
- Comfortable working in a fast-paced, evolving environment.
- Knowledge of Information & Cyber Security concepts, standards, and frameworks.
- Experience in regulated industries.
- Background in transition or knowledge transfer projects.
Close
This advertiser has chosen not to accept applicants from your region.
7
Associate IT Analyst Security (Security Information)
Ortigas, National Capital Region
Talentium Inc
Posted today
Job Viewed
Job Description
**SCOPE OF WORK**
- Create and maintain security detection use cases to improve detection efficiency and effectiveness.
- Administer the bank’s Security Orchestration, Automation, and Response (SOAR) platform.
- Gather security automation requirements, develop automation workflows, develop, test, and deploy automation actions.
- Develop and maintain custom connectors between SOAR and target systems using APIs where needed.
- Support the team’s incident response effort where needed.
- Interface with IT operations teams and ensure proper function of infrastructure.
**QUALIFICATIONS & REQUIREMENTS**
- Bachelor degree in Computer Science or similar field. Significant achievements in the field of automation or cybersecurity can be considered in lieu of a degree.
- Working experience with Python, Powershell, and/or other scripting languages.
- Familiarity with SOAR platforms (IBM SOAR, Splunk Phantom, and/or Palo Alto Cortex) is strongly preferred.
- Familiarity with DevOps methodology and processes preferred.
- Experience in red/blue teaming, incident response, and/or forensics analysis preferred.
- Effective oral and written communication, issue resolution, and negotiation. Critical thinking and troubleshooting skills with a focus on analytical capabilities.
- Possession of relevant security certification would be desired (e.g. GIAC Certifications, etc).
**Job Type**: Fixed term
Contract length: 12 months
Schedule:
- 8 hour shift
- Day shift
- Monday to Friday
Ability to commute/relocate:
- Ortigas: Reliably commute or planning to relocate before starting work (preferred)
- Create and maintain security detection use cases to improve detection efficiency and effectiveness.
- Administer the bank’s Security Orchestration, Automation, and Response (SOAR) platform.
- Gather security automation requirements, develop automation workflows, develop, test, and deploy automation actions.
- Develop and maintain custom connectors between SOAR and target systems using APIs where needed.
- Support the team’s incident response effort where needed.
- Interface with IT operations teams and ensure proper function of infrastructure.
**QUALIFICATIONS & REQUIREMENTS**
- Bachelor degree in Computer Science or similar field. Significant achievements in the field of automation or cybersecurity can be considered in lieu of a degree.
- Working experience with Python, Powershell, and/or other scripting languages.
- Familiarity with SOAR platforms (IBM SOAR, Splunk Phantom, and/or Palo Alto Cortex) is strongly preferred.
- Familiarity with DevOps methodology and processes preferred.
- Experience in red/blue teaming, incident response, and/or forensics analysis preferred.
- Effective oral and written communication, issue resolution, and negotiation. Critical thinking and troubleshooting skills with a focus on analytical capabilities.
- Possession of relevant security certification would be desired (e.g. GIAC Certifications, etc).
**Job Type**: Fixed term
Contract length: 12 months
Schedule:
- 8 hour shift
- Day shift
- Monday to Friday
Ability to commute/relocate:
- Ortigas: Reliably commute or planning to relocate before starting work (preferred)
This advertiser has chosen not to accept applicants from your region.
8