Cyber Security Consultant – Hybrid (Philippines)

About the role

Ferrilli is seeking a client‑focused Cyber Security Consultant to support higher‑education institutions in the Philippines. The position operates on a hybrid schedule aligned with U.S. business hours to ensure seamless collaboration with clients and internal teams.

Key responsibilities

• Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations using frameworks such as NIST 800‑171, GLBA, and ISO 27001.
• Develop security roadmaps, policies, procedures, and incident‑response plans tailored to academic environments.
• Evaluate and improve controls across IAM, endpoint protection, network security, and cloud platforms (Microsoft 365, AWS, Google Workspace).
• Assist institutions in audit preparation and compliance with GLBA Safeguards Rule, PCI DSS, FERPA, and HIPAA.
• Perform internal and external penetration tests and vulnerability scans, reporting findings to technical and executive stakeholders.
• Provide advisory services on security technology implementation and secure architecture design.
• Deliver executive briefings and technical documentation, and stay current on emerging threats and regulatory changes.

Required profile

• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• Minimum 3 years of experience in cybersecurity consulting, risk assessments, or information security.
• Strong knowledge of NIST Cybersecurity Framework, NIST 800‑171, CIS Controls, and ISO 27001.
• Familiarity with higher‑education IT environments and regulatory frameworks (GLBA, FERPA, HIPAA).
• Excellent communication and stakeholder‑engagement abilities.

Required skills

• NIST 800‑171
• ISO 27001
• IAM (Identity & Access Management)
• Endpoint protection
• Network security
• Cloud security – Microsoft 365, AWS, Google Workspace
• Microsoft Entra ID (Azure AD) and M365 security tools
• Penetration testing
• Vulnerability scanning