Hire the Best Information Security Analysts
in the Philippines

I help businesses with cybersecurity operations support, IT troubleshooting, Windows system administration and clear technical documentation. I have 18 years of experience across desktop support, server support, Windows administration, endpoint security, IT operations and cybersecurity. My background includes threat hunting, incident response, SOC alert triage, SIEM/SOAR, EDR/XDR, vulnerability management support, cloud security alerts and security documentation. I am also pursuing a Master’s in Information Security at De La Salle University, which supports my work in cybersecurity research, documentation and security operations. I can help with: - Desktop and laptop troubleshooting - Windows support and system administration - Server support and basic infrastructure operations - Helpdesk / IT support ticket handling - Endpoint security and security tool support - SOC alert review and triage support - Incident report writing and cleanup - Cybersecurity documentation, SOPs, playbooks and tabletop exercise materials - Security operations reporting and executive-friendly summaries - Cybersecurity research and content review My strength is that I can bridge both IT support and cybersecurity. I can troubleshoot technical issues, understand security alerts and explain findings clearly to technical teams, non-technical users or business stakeholders. I do not use or share confidential internal data from previous employers. Any samples I provide are sanitized or created as demo materials. If you need someone with real enterprise IT and cybersecurity experience who can troubleshoot, analyze and document clearly, I can help.

✅ Certified Cybersecurity Professional Specialized in Governance, Risk, and Compliance (GRC). Certified and experienced in protecting businesses from cyber threats. ISO/IEC 27001:2022 Lead Auditor 🔎 Expertise in Risk Assessment & Security Audits Conducting comprehensive risk assessments to identify vulnerabilities. Performing audits to ensure adherence to industry standards. 📜 Compliance with Global Standards Proficient in ISO 27001, ISO 42001, HIPAA, GDPR, and NIST CSF frameworks. Ensuring organizations meet regulatory requirements with ease. 📈 Building Cybersecurity Awareness Designing and delivering tailored security awareness programs. Collaborating with stakeholders to strengthen security culture. 🛠 Proficient in Key Tools Experienced with industry-leading tools like KnowBe4, Auditboard, Vanta, LogicGate, Jira, ClickUp, Google Workspace, and Microsoft 365, enabling efficient risk management and compliance tracking. 🚀 Let’s Work Together I provide tailored solutions to safeguard your assets and elevate your cybersecurity strategy.

Cybersecurity GRC & Risk Analyst with 10+ years of IT and cybersecurity experience, specializing in security assessments, application risk, compliance, third-party risk, and security governance. I help organizations turn cybersecurity requirements into practical, structured, and auditable security outcomes. My experience includes: • Cybersecurity GRC and IT risk assessments • Application security and architecture assessments • Third-party/vendor security risk assessments • Security questionnaires and control assessments • Risk identification, findings, recommendations, and remediation tracking • Security controls and compliance mapping • SOC 2 / ISO 27001 evidence review and audit support • Secure SDLC and application security reviews • IAM, privileged access, authentication, encryption, vulnerability management, logging, incident response, API security, and backup controls • Security documentation, evidence validation, and audit-ready narratives • Risk registers, control matrices, assessment frameworks, and security governance documentation I also have a strong technical background in Microsoft Azure, Microsoft 365, Active Directory, Citrix, virtualization, networking, cloud services, and managed services, allowing me to bridge the gap between security governance and technical implementation. My approach is risk-based rather than checkbox-driven. I focus on understanding the business and technical environment, validating evidence, identifying meaningful control gaps, determining risk, and providing practical remediation recommendations. I'm particularly interested in projects involving: GRC • Cybersecurity Risk • Application Security • Third-Party Risk • Compliance • Security Assessments • Security Questionnaires • SOC 2 • ISO 27001 • NIST • Secure SDLC • IT Risk • Security Governance If you need someone who can understand both the security framework and the underlying technology, I can help.

Seasoned and results-driven network and information security professional with proven experience in planning, developing, implementing and integrating security solutions to address business needs. Solid experience in enterprise firewall management, business continuity and disaster recovery planning, IT audit, compliance & governance, vulnerability assessment and patch management, incident and change management, intrusion detection/prevention (IDS/IPS), and security log analysis (SIEM). Subject Matter Expertise: • Vulnerability Assessment/Risk Management • Information Security Governance and Audit & Compliance • Security Information and Event Management (SIEM) • Identity and Access Management (IAM) • Information Security Management • Endpoint Detection and Response (EDR) • DevOps & Cloud Security | GCP Azure AWS • Next Generation Firewall Management • Web Application Security • Information Security Awareness Training • Infrastructure Security Monitoring • Security Operations Management (SOC)

• Experience in designing and developing custom Power Apps Canvas applications, Power Automate workflows, and SharePoint Online solutions in a Global Tech company. • Experienced in administration, configuration, and maintenance of enterprise network security (Fortigate, Sophos UTM), Windows Server 2008/2012/2016, Shell scripting. • Experienced in Trend Micro Apex Central/Apex One/Vision One/MDM/CloudApp Security/Deep Discovery, Peplink, Cyberoam, Ubiquiti, FlowMon, Nagios XI, WatchGuard, BackBox Linux, Kali Linux, Cisco/Linksys/3COM devices, Ubuntu Linux, Exinda Orchestrator, Windows 7/8/10, MacOS X, Sophos Access Point, Sophos Endpoint Protection (Cloud) and Linux Server. • Experienced in using VOIP Cloud Server, Microsoft 365, Google Workspace, VMWare ESXi 6.7, VirtualBox, Linux Shell Scripting and WiFi Tools (Mobile Apps). • Excellent knowledge on Remote Desktop tools: TeamViewer, RDP, AnyDesk, Remmina Remote Desktop Client, TightVNC. • Strong interpersonal skills and management skills, with ability to adapt to new technologies and applications proficiently. • Experienced in using disaster recovery tools, Timeshift, Network IP Cameras/CCTV, and configuration of Biometric Door Access. • Excellent English written and communication skills.

Aside from doing Information Security and Compliance related works, I'm also constantly working on my marketing and sales skills. As you can see in my previous Upwork completed jobs, I specialized in ECommerce and business to business deals. I also do end-to-end sales processes, generating leads, drafting marking emails, and newsletters, and if needed I can also landing pages.