IT Security Engineer

Schedule: Monday to Friday (7:00AM - 4:00PM PHT)
What are we looking for?
Skills Required
NIST CSF and COSO Security frameworks and standards
Risk management methodologies: qualitative/quantitative risk scoring, control assessments
Audit processes: internal audits, external audits, evidence collection
SOX, Australian Privacy regulatory requirements knowledge
Vendor risk management concepts: questionnaires, SIG, due diligence
Skills expected:
Implementing and testing security controls
Automating evidence collection using scripts or integrations
Integrating GRC tools with cloud platforms
Building dashboards and metrics for compliance and risk
Troubleshooting technical control failures, Secure configuration management (CIS benchmarks, hardening)
Abilities required:
Translate compliance requirements into technical controls
Engineer scalable and audit‑ready solutions
Collaborate with DevOps and engineering teams
Validate control effectiv...