IT Security Analyst (Governance)

• Accelerate Your Career: Work in a high-performing, inclusive environment that supports your growth through structured learning, mentorship, and exposure to real-world security challenges.
• Be Empowered: We value your contributions and provide the tools, autonomy, and guidance to help you thrive.
• Collaborate with Experts: Join a team of top-tier engineers, consultants, and security professionals who are passionate about solving complex problems.
• Make Your Voice Heard: We foster a transparent, respectful culture where ideas are welcomed and innovation is encouraged.
• Work-Life Balance: Flexible work arrangements and a supportive team culture that prioritizes well-being.

• Assist in the development, review, and continuous improvement of security policies, procedures, and standards aligned with industry best practices.
• Support risk assessments, control evaluations, and internal/external compliance audits across various client environments.
• Collect, analyse, and interpret security metrics and evidence to support reporting, decision-making, and continuous improvement.
• Maintain and update documentation related to security controls, compliance activities and audit findings.
• Collaborate with technical teams to ensure operational alignment with GRC requirements and security frameworks.
• Coordinate and contribute to security awareness initiatives, training programs, and internal communications.
• Stay informed on evolving cybersecurity frameworks, regulatory requirements, and threat landscapes (e.g., ISO 27001, NIST CSF, Essential Eight, GDPR, APRA CPS 234).
• Participate in client engagements, workshops, and presentations to support the delivery of security consulting services.

• 3-5 years of experience in IT, cybersecurity, or compliance, preferably in a consulting or managed services environment.
• A foundational understanding of security frameworks such as ISO 27001, NIST CSF, or Essential Eight.
• Familiarity with Microsoft 365 security and governance tools, including Compliance Centre, Purview, and Defender.
• Strong documentation, communication, and analytical skills, with attention to detail and a structured approach to problem-solving.
• A proactive mindset, willingness to learn, and ability to work independently and collaboratively.
• Experience with ticketing systems, reporting platforms, and basic project coordination.

• Certifications such as CompTIA Security+, ISO 27001 Foundations, ISC2 CC / SSCP / CISSP, or ISACA CISA / CISM.
• Exposure to GRC platforms.
• Knowledge of ITIL, COBIT, or other IT governance frameworks.
• Experience supporting security audits, vendor risk assessments, or third-party compliance reviews.

• First Focus understands the importance of flexibility for a satisfying work-life balance, which is why we offer hybrid working arrangements.
• 'Never Stop Growing' is deeply embedded in our DNA - we offer 1 paid study day every month and support employees towards certifications and qualifications - we will pay for the exam and will also give you a pay rise for achieving certs (conditions apply, of course)
• HMO from the first day of your employment
• Addition of one (1) dependent (e.g., your spouse) to the Company's HMO policy (which includes medical coverage plus dental benefits package) on the first day of your employment
• All employees have free access to Uprise, including 1:1 coaching sessions from qualified psychologists or counselors
• Dayshift, weekends off* plus25 days paid days leave annually
• Employee Referral Program (Php 20,000)
• Employee MVP Award (Php 10,000)
• Social events, End of Financial Year and Christmas
• Employee Profit Sharing*
• Loyalty bonus for long-term employees*

• Security Consultant (GRC or Technical)
• Risk & Compliance Analyst
• Cybersecurity Project Manager

• 29th Floor, Robinsons Cyberscape Gamma, Topaz Road, Ortigas Pasig City Metro Manila Philippines
• 26th floor, Axis Tower One Building, Filinvest Ave, Alabang, Muntinlupa

• Opportunity to work from home. If you are residing within Metro Manila or in other nearby provinces, a hybrid work set-up will apply.
• Salary will depend on the evaluation of candidate's values, skills and experiences.

First Focus