IT Security QA

Questronix · Pasig City

Job Description:Security Assurance:

Conduct regular security assessments, including vulnerability scans, penetration tests, and risk assessments to identify and mitigate security risks.
Develop, implement, and maintain security policies, procedures, and controls to ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA, NIST, ISO 27001).
Perform security reviews and audits of internal and third-party systems to ensure adherence to security best practices.

Security Engineering:

Ensure to implement security solutions and technologies to protect against cyber threats and vulnerabilities.
Collaborate with IT and development teams to integrate security into system design, application development, and deployment processes.
Investigate and respond to security incidents, including conducting forensic analysis and coordinating with incident response teams.

Compliance and Risk Management:

Stay current with emerging security threats, technologies, and industry trends to continuously improve security posture.
Support and preparation and submission of compliance reports and documentation for audits.

Reporting:

Generate and present regular security reports and metrics to senior management, highlighting key security events, trends, and the effectiveness of security measures.
Document security incidents, including the nature of the threat, response actions, and outcomes.
Prepare and submit compliance reports and documentation for audits, ensuring accurate and timely reporting of security posture and incidents.

Collaboration and Communication:

Work closely with cross-functional teams to address security-related issues and implement effective solutions.
Provide expert guidance and recommendations on security matters to senior management and other stakeholders.
Document and communicate security findings, recommendations, and status to relevant parties.

Requirements

Qualifications:

Minimum of 5 years of experience in IT security, information assurance, or a related field.
Strong understanding of security frameworks and standards such as ISO 27001, NIST, GDPR, and HIPAA.
Hands-on experience with security assessments, including vulnerability scanning, penetration testing, and risk assessments.
Solid background in security engineering, with the ability to implement security tools, technologies, and solutions.
Proficient in conducting security audits and reviews of internal and third-party systems.
Experience working with cross-functional teams to integrate security into software development and IT operations.
Strong knowledge of incident response procedures, forensic analysis, and mitigation strategies.
Familiarity with compliance reporting and audit preparation.
Excellent report writing and communication skills, with the ability to present findings and metrics to senior management.
Up-to-date with emerging threats, technologies, and best practices in cybersecurity.
Strong analytical and planning skills;
Good communication and presentation skills;
Excellent problem-solving skills;
Amenable to work in Ortigas (fully onsite)