Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 27 hours ago

Information Security Specialist

MicroSourcing1,113 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security SpecialistMicroSourcing

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on MicroSourcing's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. MicroSourcing postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 27 hours ago

MicroSourcing median: 1 days open

The posting

Position Overview

The Information Security Specialist will support MicroSourcing's information security program through audit and

compliance activities, security operations, training and awareness, risk management, and security control

implementation. The role will help ensure that information security controls, policies, and processes are effectively

implemented, monitored, and continuously improved in alignment with applicable standards, regulatory

requirements, and client commitments.

Recruitment Summary

MicroSourcing is seeking an Information Security Specialist to support our information security program across

audits, security operations, training and awareness, risk management, and compliance initiatives. The successful

candidate will work closely with internal teams, auditors, and stakeholders to maintain effective security controls,

support regulatory and client requirements, and drive continuous improvement in our cybersecurity posture.

Key Responsibilities:

Audit and Compliance

  • Support internal and external audits, including ISO/IEC 27001, SOC 2, PCI DSS, and client security
  • assessments.
  • Coordinate the collection, review, and validation of audit evidence.
  • Track audit findings, corrective actions, and remediation activities.
  • Participate in audit walkthroughs, control assessments, and compliance reviews.
  • Maintain audit documentation, evidence repositories, and compliance records.

Information Security Operations

  • Assist in day-to-day information security operations and monitoring activities.
  • Support implementation, monitoring, and review of security controls.
  • Coordinate with IT, Infrastructure, HR, and Operations teams on security issues.
  • Assist with vulnerability management, security assessments, and remediation tracking.
  • Coordinate with IT and relevant stakeholders to investigate security events and ensure timely remediation of identified issues.
  • Generate and maintain operational reports, dashboards, and metrics related to security tools, vulnerabilities, alerts, and remediation status.
  • Assist with onboarding, tuning, and periodic review of security tools, including policies, detection rules, exclusions, and access permissions.
  • Support the configuration, administration, health monitoring, and maintenance of security-related tools and platforms.
  • Review, validate, prioritize, and escalate security alerts and identified vulnerabilities based on severity and business impact.
  • Perform, coordinate, and document vulnerability scans and security assessments across applicable systems, endpoints, applications, and infrastructure.
  • Monitor and review alerts, dashboards, and reports from security tools, including EDR/XDR, SIEM, vulnerability scanners, email security, and other security platforms.
  • Support incident management documentation, escalation, and follow-up.

Training and Awareness

  • Assist in planning and delivering information security awareness programs.
  • Support onboarding, refresher training, and employee awareness sessions.
  • Develop security awareness materials and communication campaigns.
  • Coordinate phishing simulation exercises and track training completion.
  • Promote a strong security culture across the organization.

Risk Management and Security Assessments

  • Assist with information security risk assessments and control evaluations.
  • Support third-party and vendor security assessments and questionnaire reviews.
  • Maintain risk registers, action plans, and remediation trackers.
  • Identify potential security risks and escalate issues appropriately.
  • Assist in reviewing policies, procedures, and control effectiveness.
  • Policy, Documentation and Governance
  • Assist in developing and reviewing information security policies and procedures.
  • Support the implementation and maintenance of the ISMS.
  • Maintain security documentation in accordance with document control requirements.
  • Prepare security reports, metrics, and management updates.
  • Support continuous improvement initiatives.

Stakeholder and Audit Coordination

  • Coordinate with internal departments, clients, auditors, and service providers.
  • Support audit scheduling, meeting coordination, and follow-up actions.
  • Assist in responding to client security questionnaires and compliance requests.
  • Communicate security requirements and follow up on deliverables.
  • Perform other information security-related tasks as assigned.

Required Qualifications

  • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Security, or a
  • related field.
  • At least 2–4 years of experience in information security, IT audit, GRC, cybersecurity operations, or a related field.
  • Knowledge of ISO/IEC 27001, SOC 2, PCI DSS, and NIST Cybersecurity Framework.
  • Experience supporting audits, compliance assessments, or security control reviews.
  • Understanding of risk management, security policies, and information security principles.
  • Strong documentation, analytical, organizational, and communication skills.
  • Ability to work independently and collaborate with cross-functional teams.

Preferred Qualifications

  • ISO/IEC 27001 Internal Auditor or Lead Auditor training/certification.
  • Experience with security awareness and phishing simulation programs.
  • Familiarity with Vanta, OneTrust, RSA Archer, or similar GRC platforms, as well as EDR/XDR, SIEM,
  • vulnerability scanning, and security monitoring tools.
  • Knowledge of vulnerability management, endpoint security, and security monitoring.
  • Experience in a BPO, IT services, or managed services environment.
  • Familiarity with the Philippine Data Privacy Act.
  • Relevant certifications such as ISC2 CC, CompTIA Security+, or equivalent.

Core Competencies

  • Information Security: Understanding of security principles, controls, and best practices.
  • Audit and Compliance Ability: to support audits and maintain reliable evidence.
  • Risk Management: Ability to identify, document, and track security risks.
  • Communication: Effective collaboration with stakeholders and auditors.
  • Analytical Thinking: Ability to analyze findings and identify control gaps.
  • Documentation: Accurate and organized security documentation.
  • Continuous Improvement: Proactively identifying opportunities to improve security processes.

Key Performance Indicators (KPIs)

  • Timely completion of assigned audit evidence and action items.
  • Timely tracking and follow-up of assigned remediation activities.
  • Completion of assigned security reviews and monitoring tasks.
  • Training completion rates and timely delivery of awareness activities.
  • Timely completion and documentation of assigned risk assessments.
  • Accuracy and timely maintenance of security documentation.
  • Responsiveness to stakeholder requests and assigned actions.

Work Environment

  • Full-time position supporting the organization's information security program.
  • Regular collaboration with internal departments, auditors, clients, and security partners.
  • Participation in audit walkthroughs, security assessments, training sessions, and compliance activities.
  • Ability to manage multiple information security initiatives and priorities simultaneously.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against MicroSourcing's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on MicroSourcing's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    MicroSourcing's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.