Junior IT Security Specialist (Fintech)

TL;DR

Junior IT Security Specialist (Fintech): Managing and improving vulnerability management and patching processes to maintain a strong security posture across infrastructure and applications with an accent on timely identification, prioritization, and remediation of vulnerabilities. Focus on coordinating patch deployment, monitoring compliance, and aligning processes with regulatory frameworks like ISO27001 and CIS benchmarks.

Location: Hybrid (Manila, Philippines), requiring 2 days per week in the office. Must be amenable to work on EMEA time schedule.

Company

SimCorp is a leading provider of integrated investment management solutions and an independent subsidiary of the hirify.global Group.

What you will do

• Conduct regular vulnerability scans and assessments, analyzing and prioritizing findings based on CVSS scoring and business impact.
• Develop and maintain patching schedules, coordinating deployment across on-premises and cloud environments.
• Monitor patch compliance, report on key metrics, and ensure adherence to internal policies and regulatory requirements.
• Align security processes with ISO27001 and CIS benchmarks, supporting audits with relevant documentation.
• Assist in incident investigations related to vulnerabilities and patching gaps, contributing to continuous improvement initiatives.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• At least 3+ years of experience in IT security operations, vulnerability management, and patching.
• Experience with vulnerability scanning tools (e.g., Qualys, Microsoft Defender, Armis Centrix & VIPR).
• Familiarity with CVSS scoring and remediation SLAs.
• Knowledge of secure software development lifecycle and cloud security principles.
• Proficient analytical, problem-solving, communication, and collaboration skills.

Nice to have

• Certifications: CompTIA Security+, CISSP, or equivalent.

Culture & Benefits

• Good work-life balance with flexible working hours and a hybrid workplace model (2 days in office, rest remote).
• IP sprints for skill development and company contribution (3 weeks per quarter).
• Personalized approach to professional development.
• Inclusive and collaborative workplace culture.
• Attractive salary, bonus scheme, and pension.