Information Security Analyst

About the Role

We are looking for an Information Security Analyst to join our Information Security team and support the monitoring, protection, and continuous improvement of our security environment.

The ideal candidate will have a foundational understanding of cybersecurity principles, strong analytical and problem-solving skills, and a willingness to learn and grow in a fast-paced enterprise environment. You will work closely with Information Security, IT, and business teams to identify security events, support vulnerability remediation, maintain security controls, and contribute to overall security and compliance initiatives.

Title: Information Security Analyst

Location: Manila, PH

Job Type: Full-time

Key Responsibilities

• Monitor and triage security alerts, logs, and events to identify potential security incidents and escalate issues according to established procedures.
• Review vulnerability scan results and coordinate with internal teams to support timely remediation.
• Troubleshoot and resolve Information Security tickets and service requests through established helpdesk processes.
• Assist with the administration and maintenance of security tools and controls, including SIEM, endpoint protection, vulnerability management, email security, and identity and access management solutions.
• Support security assessments, audits, evidence collection, and remediation tracking.
• Assist in maintaining security policies, standards, procedures, guidelines, and operational documentation.
• Support security awareness initiatives, including employee security awareness training and phishing simulation programs.
• Create and maintain operational runbooks, knowledge articles, procedures, and user guidance.
• Collaborate with Information Security, IT, infrastructure, and business teams to support enterprise security objectives.
• Stay current with emerging security threats, technologies, and industry best practices.
• Perform other duties and security-related activities as assigned.

What We're Looking For

• Basic understanding of core information security concepts, including access control, vulnerability management, phishing, endpoint protection, security monitoring, and incident response.
• Familiarity with security technologies such as SIEM, EDR/endpoint protection, vulnerability scanners, email security, IAM, or security monitoring tools .
• Understanding of security frameworks and best practices such as NIST and ISO 27001 is preferred.
• Exposure to Microsoft 365 and enterprise IT environments is advantageous.
• Experience with ticketing systems or IT service management processes is a plus.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written and verbal communication skills.
• Strong attention to detail and organizational skills.
• Ability to manage multiple priorities and follow tasks through to completion.
• Ability to work independently while collaborating effectively with technical and non-technical teams.
• Strong curiosity and willingness to learn new technologies and cybersecurity concepts.

Education & Certifications

• Associate's or Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science , or a related field is preferred but not required.
• Relevant cybersecurity certifications are a plus, such as CompTIA Security+, SSCP, Microsoft Security certifications, or equivalent .

What You'll Bring

• Professionalism, integrity, and sound judgment when handling sensitive information.
• A methodical approach to analyzing and resolving security issues.
• Strong accountability and ownership of assigned responsibilities.
• Curiosity and enthusiasm for developing a career in information security.
• A collaborative mindset and commitment to continuous learning and improvement.