Cyber Security Consultant (Philippines)

At Ferrilli, we drive positive changes in higher education through technology. Our mission is to enhance student success by optimizing campus IT infrastructure and implementing innovative solutions. With a holistic approach, we provide expert IT services and consulting, to help clients achieve their goals.

This role is based in the Philippines and will follow a hybrid work setup. Working hours for this role are aligned with U.S. business hours to ensure seamless collaboration with our clients and teams.

POSITION SUMMARY

We are seeking a highly skilled and client-focused Cybersecurity Consultant to deliver cybersecurity assessments, advisory services, and remediation planning to our higher education clients. The ideal candidate will have a strong technical background combined with a consultative mindset, capable of translating complex security needs into actionable solutions for IT leaders, compliance teams, and institutional stakeholders.

RESPONSIBILITIES

• Conduct cybersecurity risk assessments, gap analyses, and maturity evaluations aligned with frameworks such as NIST 800-171, GLBA, and ISO 27001.
• Support clients in the development of security roadmaps, policies, procedures, and incident response plans tailored for academic environments.
• Evaluate existing controls and recommend improvements across areas including identity and access management (IAM), endpoint protection, network security, and cloud security (e.g., Microsoft 365, AWS, Google Workspace).
• Assist institutions with preparation for audits and regulatory compliance (e.g., GLBA Safeguards Rule, PCI DSS, FERPA, HIPAA).
• Conduct internal and external penetration tests and perform vulnerability scans to identify, assess, and report on security weaknesses across network, application, and endpoint systems.
• Provide advisory services on the implementation of security technologies and secure architecture design.
• Deliver executive-level briefings and technical documentation to IT and administrative leadership.
• Stay current on emerging threats, vulnerabilities, and compliance requirements affecting the higher education sector.
• Contribute to internal knowledge sharing and continuous improvement of service offerings.

QUALIFICATIONS

Required:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 3+ years of experience in cybersecurity consulting, risk assessments, or information security roles.
• Strong knowledge of NIST Cybersecurity Framework, NIST 800-171, CIS Controls, and/or ISO 27001.
• Familiarity with higher education IT environments, systems, and organizational structures.
• Excellent communication, documentation, and stakeholder engagement skills.
• Experience with Microsoft Entra ID (Azure AD), M365 security tools, or other enterprise solutions.

Preferred:

• Industry certifications (e.g., CISSP, CISA, CISM, GIAC, CCSP, or similar).
• Experience working in or consulting for colleges and universities.
• Knowledge of GLBA, FERPA, and HIPAA regulatory frameworks.
• Experience supporting security incident response or security operations.