{"id":137817,"url":"https://alion.io/job/umpisainc-information-security-analyst-subject-matter-expert-sme-project-based","title":"Information Security Analyst Subject Matter Expert (SME) - Project-based","company":{"id":5385,"name":"Umpisa","domain":"umpisainc.com","url":"https://alion.io/company/umpisainc","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16000,"max_usd":37000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-26T00:00:00Z","employer_posted_date":"2026-08-26","last_verified_at":"2026-11-03T15:26:26Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":69},"description":"At Umpisa Inc., our mission is to make the Philippines be known globally as a tech hub.\nUmpisa Inc. is a progressive technology services company that partners with select industries, clients and people to work on pioneering and industry-changing solutions via digital transformation, modern software development and venture building.\nWe create a set of world-class and impactful products and solutions to help organizations and individuals live better lives. We offer demanding, challenging and rewarding careers in software development, product development, emerging technologies, and more for the right candidates.\nAs Information Security Analyst, you will:\nThe Information Security Analyst (SME) is responsible for protecting the organization’s information assets by designing, implementing, and maintaining security controls, policies, and best practices. As a Subject Matter Expert, this role provides hands-on technical expertise, risk assessment, and advisory support across the business, ensuring compliance with security standards while enabling secure business operations.\nCompliance Monitoring: Support the implementation and monitoring of security policies to ensure compliance with applicable laws, regulations, and industry standards (e.g. ISO 27001, NIST)\nParticipate in internal, external or regulatory audits as required. \nOther work or projects as assigned.\nRequirements\nEssential Skills:\nAligns with our values: Excellence, Integrity, Professionalism, People Success, Customer Success, Fun, Innovation and Diversity\nStrong communication skills\nStrong problem solving and analytical skills\nExcellent problem-solving ability\nKey Responsibilities\nSecurity Operations & Risk Management\n Act as the organization’s Subject Matter Expert on information security concepts, risks, and controls \n Identify, assess, and manage information security risks across systems, applications, and processes \n Monitor security events, incidents, and alerts; investigate and coordinate remediation actions \n Conduct regular vulnerability assessments and support penetration testing activities \nPolicy, Governance & Compliance\n Develop, review, and maintain information security policies, standards, and procedures \n Ensure alignment with industry standards (e.g., ISO 27001, NIST, SOC 2, or equivalent) \n Support internal and external audits, client security assessments, and compliance requirements \n Provide security guidance for data protection, access management, and secure handling of information \nAdvisory & Enablement\n Serve as a trusted security advisor to IT, Engineering, HR, and Business teams \n Review system designs, architecture, and changes to ensure security-by-design principles \n Support third-party risk assessments and vendor security reviews \n Translate complex security concepts into clear, actionable guidance for non-technical stakeholders \nAwareness & Continuous Improvement\n Lead or support information security awareness and training programs \n Stay current with emerging threats, vulnerabilities, and security best practices \n Recommend and implement improvements to tools, processes, and controls \nMinimum Requirements:\nBachelor’s degree in Information Security, Computer Science, IT, or a related field (or equivalent experience) \n at least 5 years of experience in information security, cybersecurity, or IT risk roles \n Strong understanding of: \n Information security principles and frameworks \n Risk assessment and vulnerability management \n Identity and access management (IAM) \n Data protection and privacy concepts \nExperience working in a hands-on, SME or fast-growing organization\nExperience communicating policies and compliance requirements with both technical and non-technical audiences at various levels in the organization.\nGood experience in establishing and performing policy, standard and procedure assessment in a cloud-based environment, technologies, and services.\nGood experience defining, revising, and implementing corporate information security policies, standards, processes, guideline, and related regulatory expectations.\nFamiliarity with various industry frameworks and requirements including NIST framework, ISO 27001, PCI DSS, SOC 2, etc.\nPassionate in ensuring the confidentiality, integrity, and availability of our critical assets and contributing to our organization's information security initiatives by applying your knowledge and attention to details.\nAble to work and communicate well with different stakeholders. \nRemains composed when decisions have to be made quickly.\nPreferred:\nRelevant certifications (any of the following): \n CISSP, CISM, CISA \n ISO 27001 Lead Implementer / Auditor \n Security+, CEH, or equivalent \n Experience with cloud security (AWS, Azure, or GCP) \n Familiarity with security tools (SIEM, endpoint security, vulnerability scanners)\nGood understanding of regulatory requirements in different markets the organization operates (e.g., MAS, HKMA, FSC, BNM, BSP, BOT).\nGood understanding of security risk and compliance assessment, process, and procedures\nGood to have Cybersecurity Fundamental certifications such as CompTIA Security+, ISC, etc\nAble to develop and implement new and improved ways of doing work; encourage staff and guide organization and foster a positive security behavior and posture.","description_format":"text","description_chars":5293,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-01-13T00:00:00Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.637,"p_room":0.28,"age_days":69,"expected_fill_days":28,"reasons":["conf:4","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/umpisainc-information-security-analyst-subject-matter-expert-sme-project-based","json_url":"https://alion.io/job/umpisainc-information-security-analyst-subject-matter-expert-sme-project-based.json","meta":{"generated_at":"2026-11-03T17:18:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24116,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5385},"rest":"https://alion.io/mcp/rest/get_company?id=5385"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fumpisainc-information-security-analyst-subject-matter-expert-sme-project-based"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fumpisainc-information-security-analyst-subject-matter-expert-sme-project-based"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fumpisainc-information-security-analyst-subject-matter-expert-sme-project-based"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/umpisainc-information-security-analyst-subject-matter-expert-sme-project-based\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fumpisainc-information-security-analyst-subject-matter-expert-sme-project-based"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":137817}},{"tool":"search_jobs","arguments":{"company":"umpisainc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":137817},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}