IT Security Consultant

JOB SPECIFICATIONS

Position Title: IT Security Consultant

Department: Information Technology

Reports To: Chief Information Officer (CIO)

JOB OBJECTIVE

The IT Security Consultant is responsible for providing expert guidance in strengthening the organization's cybersecurity posture, protecting information systems, applications, cloud infrastructure, networks, and sensitive data against evolving security threats.

The role focuses on identifying security risks, recommending and implementing effective security controls, ensuring regulatory compliance, and improving the organization's overall cybersecurity maturity.

The consultant is also expected to leverage Artificial Intelligence (AI), automation, and modern cybersecurity technologies to improve threat detection, vulnerability management, security monitoring, incident response, and other IT security operations, while maintaining appropriate human oversight.

The position supports the organization's digital transformation and AI-driven IT operations initiatives, ensuring that security practices remain effective, practical, scalable, and aligned with business objectives.

BASIC QUALIFICATIONS

• Work Experience: At least five (5) years of progressive experience in IT Security, Cybersecurity, Information Security, or IT Risk Management, preferably in financial services, fintech, banking, or other regulated industries.
• Education: Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field. Equivalent relevant professional experience may be considered.
• Certifications: Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, ISO 27001 Lead Implementer/Lead Auditor, or equivalent are preferred.
• AI Experience: Practical experience using AI-powered cybersecurity tools, security automation, AI-assisted threat analysis, and AI-driven security operations.
• Cloud Security: Experience securing AWS, Microsoft Azure, or other cloud environments, including hybrid infrastructure.
• Work Location: Must be willing to travel when required and participate in onsite security assessments or meetings.

TECHNICAL SKILLS AND COMPETENCIES

*Cybersecurity and Infrastructure Security

• Strong understanding of cybersecurity principles, security architecture, network security, firewalls, VPNs, endpoint protection, and identity and access management.
• Hands-on experience with vulnerability assessment, penetration testing coordination, security monitoring, and incident response.
• Knowledge of AWS and Azure security controls, including IAM, logging, encryption, network security, and cloud configuration management.
• Familiarity with Linux, Windows Server, databases, APIs, web applications, and modern application security practices.
• Working knowledge of cybersecurity frameworks such as NIST CSF, ISO 27001, CIS Controls, OWASP, and MITRE ATT&CK.
• Understanding of the Philippine Data Privacy Act, relevant NPC issuances, and applicable BSP/SEC regulatory requirements.

*AI-Driven Cybersecurity and Automation

• Experience using AI-assisted security monitoring, threat intelligence, vulnerability prioritization, and incident investigation.
• Knowledge of AI-powered SIEM, SOAR, EDR/XDR, or comparable cybersecurity platforms.
• Ability to identify opportunities to automate repetitive security activities, reduce manual monitoring, and improve incident response efficiency.
• Familiarity with AI security risks, including prompt injection, sensitive data exposure, insecure AI integrations, and unauthorized AI tool usage.
• Understanding of AI security governance, including NIST AI RMF and OWASP guidance for LLM applications.
• Ability to assess the security of AI applications, AI-assisted development tools, and third-party AI platforms.
• Experience developing or implementing automated security workflows, scripts, or AI-assisted security solutions.

WORK DESCRIPTION AND RESPONSIBILITIES

• Information Security Governance: Review, develop, and recommend improvements to IT security policies, standards, procedures, and controls aligned with company requirements and applicable regulations.
• Cybersecurity Risk Management: Conduct security risk assessments, identify vulnerabilities, evaluate their business impact, and recommend practical mitigation measures.
• Security Monitoring and Incident Response: Assess security monitoring capabilities, recommend improvements to threat detection, support incident investigations, and guide containment, recovery, and preventive actions.
• Cloud and Infrastructure Security: Review AWS, Azure, network, server, and endpoint security configurations. Recommend improvements to access controls, encryption, logging, monitoring, and infrastructure protection.
• Application and API Security: Assess application security controls, API protection, authentication, authorization, and secure development practices. Coordinate remediation of identified vulnerabilities with Development and Infrastructure Teams.
• AI-Driven Security Operations: Introduce and implement appropriate AI-assisted security tools and automation to improve threat detection, vulnerability analysis, security monitoring, and incident response, subject to company approval and security controls.
• AI Security Governance: Evaluate cybersecurity risks associated with AI platforms, AI-assisted development tools, and AI integrations. Recommend controls to protect company information, prevent data leakage, and promote responsible AI adoption.
• Vulnerability Assessment and Penetration Testing: Coordinate VAPT activities, validate security findings, recommend remediation priorities, and monitor closure of identified vulnerabilities.
• Identity and Access Management: Assess privileged access, MFA, role-based access controls, account provisioning, and other identity security mechanisms.
• Third-Party Security Assessment: Review vendor cybersecurity practices, cloud security controls, third-party risks, and compliance with contractual security requirements.
• Regulatory Compliance and Audit Support: Provide technical guidance and support for cybersecurity audits, regulatory compliance assessments, and remediation of security findings.
• Business Continuity and Disaster Recovery: Assess cybersecurity considerations in business continuity and disaster recovery arrangements, including ransomware preparedness, backup protection, and recovery testing.
• Security Awareness and Knowledge Transfer: Conduct cybersecurity awareness sessions and provide practical coaching to IT personnel on modern cybersecurity tools, AI-assisted security operations, and security best practices.
• Continuous Security Improvement: Recommend new cybersecurity technologies, automation opportunities, and improvements that strengthen security while maintaining operational efficiency and cost-effectiveness.

EXPECTED CONSULTANCY DELIVERABLES

The IT Security Consultant is expected to provide measurable improvements and practical outputs, including:

• Cybersecurity Assessment and Improvement Plan – Assessment of the organization's current security posture, key risks, gaps, and recommended improvements.
• Security Risk and Vulnerability Register – Documented security risks, recommended mitigation measures, priorities, and remediation tracking.
• AI-Driven Security Improvement Initiatives – Identification and implementation of approved AI-assisted cybersecurity solutions and security automation opportunities.
• Security Policies and Standards Review – Recommendations for improving existing security policies, technical controls, and regulatory compliance.
• Incident Response and Security Monitoring Improvements – Recommendations and implementation guidance to strengthen security monitoring, threat detection, and incident response.
• Knowledge Transfer and Coaching – Practical coaching and technical guidance to the IT Security, Infrastructure, System Administration, and Development Teams.
• Periodic Security Assessment Reports – Regular reporting of security findings, improvement progress, unresolved risks, and recommendations to IT Management.

PERFORMANCE METRICS

• Security Risk Management - Timely identification, assessment, prioritization, and recommended mitigation of cybersecurity risks.
• Vulnerability Management - Completeness of vulnerability assessments, remediation tracking, and timely validation of resolved security findings.
• Regulatory Compliance - Improvements in compliance with applicable cybersecurity policies, regulatory requirements, and security standards.
• AI and Automation Adoption - Successful implementation of approved AI-assisted security solutions and automation initiatives with measurable operational benefits.
• Security Monitoring and Incident Response - Improvements in threat detection, investigation efficiency, incident response readiness, and security monitoring effectiveness.
• Security Documentation - Timely submission of security assessment reports, technical recommendations, risk registers, and supporting documentation.
• Knowledge Transfer - Effectiveness of cybersecurity coaching, technical guidance, and knowledge transfer to internal IT personnel.
• Continuous Improvement - Measurable improvements in cybersecurity maturity, security operations efficiency, and reduction of recurring security weaknesses.

CONSULTANCY ENGAGEMENT EXPECTATIONS

The IT Security Consultant shall work closely with the CIO, IT Security Team, Infrastructure Team, System Administration Team, Software Development Team, and other relevant stakeholders.

The consultant is expected to provide hands-on technical guidance and support implementation activities rather than focusing solely on advisory work.

The engagement should prioritize practical, cost-effective, and sustainable cybersecurity improvements while developing the internal IT Team's capability to independently maintain and improve the organization's security posture.

Key Expectation: The consultant should help transform the organization's IT Security operations from primarily manual and reactive activities toward more proactive, automated, and AI-assisted cybersecurity operations, with appropriate human supervision, security controls, and accountability.

Pay: From Php85,000.00 per month

Application Question(s):

• Have you used AI-powered cybersecurity tools, security automation, AI-assisted threat analysis, and AI-driven security operations?

Experience:

• IT Security, Cybersecurity, Information Security: 5 years (Required)

License/Certification:

• Certified Information Systems Security Professional (CISSP) (Preferred)
• Certified Information Security Manager (CISM) (Preferred)
• Certified Ethical Hacker (CEH) (Preferred)
• CompTIA Security+ (Preferred)
• ISO 27001 Lead Implementer/Lead Auditor (Preferred)

Work Location: Hybrid remote in Pasig