SENIOR SECURITY ANALYST
SM AURA OFFICE TOWER
SM AURA OFFICE TOWER
SM AURA OFFICE TOWER
SM AURA OFFICE TOWER
SM AURA OFFICE TOWER
SM AURA OFFICE TOWER
Make your next big career move by applying as KMC Solutions' next SENIOR SECURITY ANALYST
The Senior Security Analyst will play a critical role in strengthening and advancing GCI's cybersecurity capabilities as part of the organization's security maturity journey.
This position is responsible for independently assessing security risks, identifying control gaps and vulnerabilities, recommending remediation strategies, and driving practical security improvements across the organization. The successful candidate will lead the design, implementation, and operation of IT security controls aligned with organizational policies, Information Security Management System (ISMS) requirements, and ISO 27001 frameworks.
We are seeking a hands-on cybersecurity professional who thrives in evolving environments, possesses strong problem-solving capabilities, takes initiative, and can effectively balance security requirements with business objectives.
On top of your salary, here are the exciting benefits you can look forward to:
- Health Insurance/HMO
- Enjoy unlimited MadMax Coffee
- Diverse learning & growth opportunities
- Accessible Cloud HR platform (Sprout)
- Above standard leaves
The main responsibilities of a SENIOR SECURITY ANALYST include:
Security Risk & Vulnerability Management
- Conduct independent security assessments, investigations, and reviews of infrastructure, systems, applications, and business processes.
- Identify security risks, control deficiencies, and vulnerabilities across the organization's technology landscape.
- Perform risk and vulnerability assessments and recommend practical remediation strategies to address root causes.
- Drive remediation initiatives and ensure mitigation measures are effectively implemented and monitored.
- Evaluate emerging threats and assess their impact on the organization's security posture.
Security Controls Design & Implementation
- Design, implement, operate, and continuously improve IT security controls aligned with ISMS and ISO 27001 requirements.
- Assess the effectiveness of existing security controls and recommend enhancements to strengthen organizational security.
- Develop preventive, detective, and corrective security measures to reduce cyber risks.
- Lead security improvement initiatives that support GCI's security maturity roadmap.
Security Operations & Incident Management
- Monitor security events, alerts, and incidents across systems, networks, cloud platforms, and endpoints.
- Investigate security incidents, determine root causes, and implement corrective actions.
- Support incident response, containment, recovery, and post-incident reviews.
- Document security findings, risks, incidents, and remediation activities.
Infrastructure & Cloud Security
- Support the security of Microsoft 365, Microsoft Azure, Microsoft Defender, Microsoft Sentinel, Firewalls, SD-WAN, Network Security Infrastructure, and Proxy Solutions.
- Identify and remediate infrastructure, endpoint, and network vulnerabilities.
Governance, Compliance & Continuous Improvement
- Support the implementation, maintenance, and continuous improvement of the Information Security Management System (ISMS).
- Ensure security practices are aligned with ISO 27001 controls and organizational security policies.
- Develop and recommend security standards, procedures, and best practices.
- Partner with stakeholders across the business to drive security awareness and continuous improvement initiatives.
- Contribute to the organization's next phase of security maturity and capability development.
To apply, you must be an expert on the following requirements:
Required Experience
- Minimum of 5 years of experience in Information Security, Cybersecurity, or related field.
- Proven experience conducting independent security assessments, investigations, and risk evaluations.
- Strong hands-on experience designing, implementing, and operating IT security controls.
- Demonstrated expertise in risk management, vulnerability management, and remediation planning.
- Experience supporting or implementing ISMS and ISO 27001 frameworks.
- Strong track record of identifying security gaps and driving practical security improvements.
- Experience working in organizations undergoing security transformation or improving security maturity is highly preferred.
Technical Skills
- Hands-on experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 Security, Microsoft Azure Security, Firewalls, SD-WAN, Network and Infrastructure Security, and Proxy Technologies.
- Experience performing vulnerability assessments, security reviews, and penetration testing activities.
- Strong understanding of cybersecurity controls, threat management, and risk mitigation practices.
It will also be favorable if you are knowledgeable in:
- Proactive and solutions-oriented mindset.
- Strong analytical, investigative, and problem-solving abilities.
- Ability to work independently and take ownership of security initiatives.
- Strong stakeholder management and communication skills.
- Ability to influence change and drive security improvements across the organization.
- Continuous improvement mindset with a focus on strengthening security maturity.
The successful candidate must submit the following pre-employment requirements
- Scanned copy of valid NBI Clearance
- Accomplished Medical or PEME Slip (covered by KMC)
- 2x2 & Half body picture with white background
- Proof of government numbers (TIN, SSS, Pag-ibig, & Philhealth)
- Photocopy of 2 valid IDs – front & back (government-issued)
- Clear copy of your Birth Certificate (PSA or NSO)
- Accomplished HR Forms & Promissory Note (will be provided by KMC’s Onboarding Team
Click here to view the complete list of KMC’s pre-employment requirements.
KMC Careers
If you're a rockstar at what you do and looking to be a part of our amazing story, we want to hear from you!
We offer attractive salaries and benefits plus you get to work in some of the Philippines' best flexible workspaces. Our employees also get to enjoy exclusive discounts, rewards and freebies, and invites to our monthly events. We are always recruiting for roles in IT & Development, Marketing, Business Administration, HR & Recruitment and Legal & Finance Roles.
KMC provides quality employment opportunities for job-seekers looking for a career that is both challenging and fulfilling. We are also committed to providing equal opportunities at every selection stage. We do not discriminate due to age, gender, sexual orientation, ethnicity, nationality, and religion.
Work with Us. Grow with Us.
KMC Solutions offers a variety of career opportunities in Metro Manila, Cebu and Clark & Iloilo. We are always looking for talented and enthusiastic individuals who are ready to make their next big career move.
Our Culture
At KMC, we foster an inclusive and positive workplace for all. We push our members to succeed in everything they do through our collaborative work environment. We encourage our community to work hard and reach their full potential while delivering results that matter for our members and you as professionals.
We host amazing and quality events and implement people-centric policies to work flexibly. We ensure that everyone in our expansive network is engaged, from our internal employees and those who work on behalf our offshore partners.
Life within KMC: Work Hard Party Harder
At KMC, we work hard and we are committed to putting our best foot forward in everything we do. Everyone is encouraged to be an individual while also working for the collective good of the KMC Community. We believe mistakes are opportunities and that you should not present a solution without a problem.
We also know when hard work deserves to be recognized so we reward our employees with monthly parties, free trips and much much more!
No account yet
Sign up to view exciting career opportunities!