Information Security Analyst

• Configure, document, implement, and maintain security controls within the Microsoft 365 E5 suite, including:
• o Microsoft Defender for Endpoint, Office 365, and Identityo Microsoft Sentinel (if applicable)o Microsoft Purview (DLP, Insider Risk, Information Protection)
• Manage and optimize:

o Conditional Access policies o Multi-Factor Authentication (MFA)o Identity and access governance (Entra ID / Azure AD)

• Monitor security alerts and incidents via Microsoft Defender portals and investigate anomalies

BDO Global Information Security Alignment

• Support the Firm’s alignment and continuous compliance with BDO’s Information Security requirement and preparation to future implementation and maintenance of the Information Security Management System (ISMS)
• Assist in mapping and enforcing ISO 27001 Annex A controls
• Prepare and maintain:
• o Security policies, procedures, and standardso Audit documentation and evidence artifacts
• Participate in internal and external audits, including remediation trackingSecurity Operations &Incident Response
• Perform initial triage and investigation of security incidents
• Escalate complex threats and collaborate with stakeholders for resolution
• Maintain incident logs, reports, and lessons learned documentation
• Assist in vulnerability management and remediation tracking

Security Awareness & Governance

• Support rollout of security awareness campaigns and phishing simulations
• Assist in enforcing security policies across departments
• Provide guidance to users and IT teams on secure practices continuous Improvement
• Identify gaps in current security posture and propose improvements
• Assist in developing security baselines and hardening standards
• Contribute to automation of security processes where possible

Qualifications
Education and experience

Bachelor’s degree in Computer Science, Information Systems, Information Technology, or related fields.
o 2–5+ years experience in IT security or systems administration with security exposure
o Hands-on or working knowledge of ISO 27001 implementation or audits
o Strong experience with Microsoft 365 E5 security stack, including:
§ Microsoft Defender suite
§ Entra ID (Azure AD) security § Microsoft Purview (DLP, labeling, compliance)
o Familiarity with:
§ Endpoint protection and hardening § Email security and anti-phishing controls
§ Access control and identity lifecycle management
o Basic understanding of:
§ SIEM/SOAR (e.g., Microsoft Sentinel)
§ Network and cloud security principles

• Competencies o Strong analytical and problem-solving skills
• o Ability to execute with minimal supervisiono Documentation and audit readiness mindseto Attention to detail and structured approach to security controls o Good communication skills across technical and business teams
• Advantages

o Microsoft Certifications:§ SC-900 (Security Fundamentals)§ SC-200 (Security Operations Analyst)§ SC-300 (Identity and Access Administrator)o ISO 27001 Foundation or Lead Implementer (advantage)

Pay: Php28,000.00 - Php30,000.00 per month

Work Location: Hybrid remote in Makati