AVP - Information and Cyber Security (Healthcare Institution)

Monroe Consulting Group; Eastern Visayas; On-site; PHP 2,500,000 - 3,500,000; Full time

Job summary

Monroe Consulting Group Philippines is partnering with a leading healthcare organisation to appoint a Head of Information and Cyber Security. The role focuses on leading enterprise-wide cybersecurity strategy, governance, and risk management within a premier healthcare institution in the Philippines.

You will drive cybersecurity programme development, oversee budgeting, training, and compliance, and report to senior management on performance and risk.

Qualifications

• Bachelor's degree in Electronics and Communications Engineering or equivalent.
• Doctorate degree in a related field preferred.
• Minimum 15 years of work experience in IT or security-related fields.

Responsibilities

• Lead the preparation, review, revision, and submission of the annual budget for Information and Cybersecurity.
• Develop, oversee, and maintain the Information & Cybersecurity Program aligning with group goals.
• Prepare the annual operational plan with objectives, strategies, KPIs, and timetables.
• Assess and monitor training plans to upskill the cybersecurity team.
• Review performance objectives and align job roles with department goals.
• Manage the Information & Cybersecurity employees, processes, and technology.
• Oversee strategic programmes, project management, and policy enforcement across the group.
• Ensure compliance with laws, regulations, and standards; monitor and address issues promptly.
• Lead risk assessment and mitigation for information assets; address threats and vulnerabilities.
• Provide regular reports to senior management and adjust initiatives to improve outcomes.

Education

Bachelor's degree in Electronics and Communications Engineering

Doctorate degree in a related field

Job description

Monroe Consulting Group Philippines, an Executive Recruitment firm, is partnering with a leading organisation in the Healthcare industry to hire a Head of Information and Cyber Security. This opportunity is based in the Philippines and offers the chance to lead enterprise-wide cybersecurity strategy, governance, and risk management within one of the country's most respected healthcare institutions.

Position Overview

Lead the development and execution of the organisation's Information and Cybersecurity strategy, ensuring the protection of critical information assets and regulatory compliance.
Drive cybersecurity governance, risk management, and strategic initiatives across the group while aligning security objectives with corporate business goals.

Key Responsibilities

• Lead the preparation, review, revision, and submission of the annual budget for Information and Cybersecurity, ensuring alignment with the company's financial goals.
• Develop, oversee, and maintain the Information & Cybersecurity Program, defining broad plans, strategies, and programmes that align with the group's business goals and objectives.
• Prepare the annual operational corporate plan for monitoring and compliance, detailing objectives, strategies, action steps, performance standards, KPIs, and timetables to ensure effective execution and alignment with the company's vision.
• Assess, develop, recommend, and monitor training and educational plans aimed at enhancing the skills of the team's employees through initiatives such as upskilling, reskilling, and cross-skilling.
• Review performance objectives for new employees, set goals, and ensure they understand the relationship between their job roles and the department's objectives, using job descriptions as a reference.
• Manage the Information & Cybersecurity employees, processes, and technology components, ensuring they operate as a fully functioning, cohesive group.
• Take charge of Information & Cybersecurity strategic programmes, project management, and ensure the development and enforcement of general policies and operational requirements across the entire group of companies.
• Ensure continuous compliance with relevant laws, regulations, and standards, oversee monitoring activities to identify and address any security or compliance issues promptly.
• Lead risk assessment and mitigation efforts, ensuring the security and integrity of the group's information assets while developing strategies to address potential threats and vulnerabilities.
• Continuously monitor and evaluate the performance of cybersecurity initiatives, providing regular reports to senior management to ensure alignment with corporate objectives and adjusting as necessary to improve outcomes.

Qualifications & Experience

• Graduate of a Bachelor's degree in Electronics and Communications Engineering, or equivalent.
• Preferably with a doctorate degree in a related field.
• At least 15 years of work experience in IT or security-related fields.

Technical / Functional Expertise

• General knowledge of information technology, operating systems, networks, applications, and databases.
• Ability to quickly correlate and trace unstructured events and high-risk incidents, with full understanding and ability to disrupt the cyber attacker kill chain.
• Knowledge of the incident response process.
• Experience in cybersecurity programme development, risk assessment, compliance monitoring, and strategic cybersecurity management.
• Strong understanding of security governance, policies, and operational requirements across complex organisations.

Soft Skills & Leadership Competencies

• Organised, responsive, and a thorough problem solver.
• Strong stakeholder management and influencing skills, with the ability to develop positive working relationships with a wide range of internal and occasionally external stakeholders.
• Trustworthy, highly self-motivated, self-directed, professional, and possessing a high level of integrity.
• A team player who thrives in a collaborative environment.
• Strong communication skills with the ability to articulate ideas, opinions, and concepts effectively.