Information Security Specialist
Summary
Information Security Specialist on Manuchar's global IT team in Manila: day to day they operate the ISO 27001 ISMS, track vulnerability/audit remediation, support internal and external audits, run risk assessments, analyze threat intelligence, and deliver security awareness training. Requires 3+ years in infosec and knowledge of ISO 27001, NIST, CIS Controls, GDPR, NIS2, and SOX.
About the role
We are seeking an experienced and highly motivated Information Security Specialist to join our global IT team. This role plays a critical part in strengthening our cybersecurity governance framework, supporting security risk management activities, ensuring compliance with international standards, and safeguarding our organization's digital assets. As a key member of the Information Security function, you will work closely with global stakeholders, IT teams, business leaders, and external auditors to drive security compliance, risk remediation, audit readiness, and security awareness initiatives across the organization.
Key responsibilities
Monitor and report on the effectiveness of global information security controls and escalate identified issues.
Coordinate and track remediation activities for vulnerabilities, audit findings, compliance gaps, and security risks.
Support and coordinate internal and external security audits, including evidence gathering and follow-up action management.
Operate and maintain the Information Security Management System (ISMS), including ISO 27001-related activities.
Monitor compliance with information security policies, standards, regulatory requirements, and contractual obligations.
Analyze threat intelligence and provide actionable security insights to stakeholders.
Conduct security risk assessments and monitor risk treatment plans through completion.
Support mergers, acquisitions, and other business initiatives through security due diligence and assessments.
Develop and deliver security awareness programs and promote cybersecurity best practices across the organization.
About you
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.
Minimum of 3 years' experience in Information Security, Cybersecurity, IT Risk Management, or related disciplines.
Experience supporting security audits, regulatory compliance, and risk management initiatives.
Hands-on experience with security control monitoring, ISMS operations, and cybersecurity governance activities.
Strong knowledge of information security frameworks such as ISO 27001, NIST, and CIS Controls.
Understanding of regulatory and compliance requirements, including GDPR, NIS2, SOX, and data privacy regulations.
Experience with information security risk management, threat intelligence, and security governance.
Strong analytical, organizational, and problem-solving skills.
Excellent communication and stakeholder management capabilities.
English proficiency is a must.