i
Looking for a job
Lisha User
@lisha_c
I lead ISO 27001 compliance audits and turn cloud security gaps into actionable business guidance.
PhilippinesWhat I'm looking for
I lead the internal audit program and prepare the organization for external certification renewals through continuous pre-audit health checks.
I verify Azure AD and M365 controls, including access reviews, password policies, device constraints, GPO security policies, and Sensitivity Labels against ISO/IEC 27001:2022 Annex A controls.
I've directed audit schedules, tracked remediation with Azure DevOps engineers, and reviewed Jira change-management and incident workflows to ensure audit-ready evidence. I also create policies, templates, audit blueprints, and compliance checklists that make complex ISO requirements usable for technical teams.
In previous roles, I managed server patching, SSL/TLS renewals, infrastructure deployments, and change and problem records across Apache, IIS, and ServiceNow environments.
Experience
Work history, roles, and key accomplishments
CA
Current
Information Security & Compliance Manager
Castelis
Jan 2024 - Present (2 years 8 months)
Managed the internal audit program lifecycle, running continuous pre-audit health checks and preparing the organization for external certification renewals. Audited Azure AD and M365 configurations, translating technical gaps into plain-language risk reports for leadership.
CA
Process Improvement Manager
Castelis
Jan 2022 - Jan 2024 (2 years)
Directed internal audit schedules and compliance reporting tracks, flagging control non-conformities and collaborating on fixes with Azure DevOps engineers. Audited access controls in Azure AD and network security configurations to determine compliance gaps.
CA
Technical Writer / Internal Auditor
Castelis
Jan 2020 - Jan 2022 (2 years)
Evaluated IT operations against data privacy standards, logging and validating regulatory evidence markers within the company's GRC SaaS tool. Authored standard templates, audit blueprints, and security policies to transform complex ISO clauses into readable compliance checklists.
Managed hands-on server patching, SSL/TLS renewals, and infrastructure deployments across Apache and IIS platforms. Logged, tracked, and closed change and problem management records inside enterprise ticketing environments like ServiceNow.
Education
Degrees, certifications, and relevant coursework
De La Salle University
Bachelor of Arts, Organizational Communication
Bachelor of Arts in Organizational Communication from De La Salle University.
CI
CQI & IRCA
ISO/IEC 27001:2022 ISMS Lead Auditor, Information Security Management
2023 - 2023
Certified ISO/IEC 27001:2022 ISMS Lead Auditor.
IM
IMSM
Internal Auditor, Auditing
Internal Auditor certification from IMSM.
IT
ITIL
ITIL v3, IT Service Management
ITIL v3 certification in IT Service Management.
CF
Cybersecurity Foundations
Cybersecurity Foundations: GRC, Cybersecurity
Certification in Cybersecurity Foundations: GRC.
BP
Business Continuity Plans (BCP) Principles and Practices
Business Continuity Plans (BCP) Principles and Practices, Business Continuity
Certification in Business Continuity Plans (BCP) Principles and Practices.
Tech stack
Software and tools used professionally
Availability
Looking for a job
Location
PhilippinesAuthorized to work in
Salary expectations
285k-300k PHP
Social media
Job categories
Skills
InfosecComplianceInternal AuditingISO 27001ISMSGDPRData PrivacyITILIT Service ManagementAzureAzure ADMicrosoft 365JiraAzure DevOpsGroup PolicyGPOAccess ReviewsControl MappingsEvidence gatheringAudit ReadinessNon Conformity MappingRisk ReportingSecurity PoliciesChange ManagementIncident ManagementServiceNowServer PatchingSSL TLSInfrastructure DeploymentApacheIISBusiness Continuity PlanningGRC
Interested in hiring Lisha?
You can contact Lisha and 90k+ other talented remote workers on Himalayas.
Message LishaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
