Chief Information Security Officer

Malayan Savings Bank; Makati; On-site; PHP 2,000,000 - 4,000,000; Full time

Job summary

Malayan Savings Bank seeks an accomplished Chief Information Security Officer (CISO) to lead the bank's cybersecurity strategy and protect information assets, platforms, and data. The CISO collaborates with executives and risk functions to strengthen cyber resilience and support secure digital transformation.

Responsibilities include governance, risk management, incident response, and security operations. Requires a degree in a related field; master’s preferred, with extensive banking security

Qualifications

• Bachelor's degree in CS/Info Security/IT or related field; master's degree preferred.
• Proven experience leading enterprise cybersecurity programs.
• Strong knowledge of banking technologies, cloud security, network security, IAM, data protection, and security architecture.
• Deep understanding of banking regulations, technology risk management, and cybersecurity governance.

Responsibilities

• Develop and execute enterprise information security and cybersecurity strategy.
• Oversee governance, policies, standards, and controls.
• Lead enterprise cyber risk management, security operations, threat intelligence, vulnerability management, IAM, and incident response.
• Provide cybersecurity risk reporting to Executive Management, Board Committees, and regulators.
• Lead cyber incident preparedness, crisis management, business continuity, and disaster recovery planning.
• Promote a culture of security awareness across the organization through education, governance, and secure-by-design practices.
• Evaluate emerging cyber threats, technologies, and regulatory developments to continuously enhance the Bank's security posture.
• Build, mentor, and lead high-performing cybersecurity teams while managing the information security budget and strategic roadmap.

Skills

Enterprise cybersecurity leadership

Cybersecurity governance

IAM

Data protection

Security architecture

Banking regulations knowledge

Education

Bachelor's degree in CS/Info Security/IT

Master's degree preferred

Job description

We are seeking an accomplished Chief Information Security Officer (CISO) to lead the Bank's enterprise information and cybersecurity strategy. The CISO will be responsible for safeguarding the Bank's information assets, digital platforms, customer data, and critical infrastructure while ensuring compliance with applicable regulatory requirements and industry standards.

Reporting to executive leadership, the CISO will partner with business, technology, risk, audit, and compliance teams to strengthen the Bank's cyber resilience, manage enterprise cyber risk, and support secure digital transformation initiatives.

Key Responsibilities

• Develop and execute the Bank's enterprise information security and cybersecurity strategy aligned with business objectives and regulatory expectations.
• Establish and oversee the Bank's cybersecurity governance framework, policies, standards, and controls.
• Lead enterprise cyber risk management, security operations, threat intelligence, vulnerability management, identity and access management, and incident response.
• Provide regular cybersecurity risk reporting, key metrics, and strategic recommendations to Executive Management, Board Committees, and regulators.
• Lead cyber incident preparedness, crisis management, business continuity, and disaster recovery planning.
• Promote a culture of security awareness across the organization through education, governance, and secure-by-design practices.
• Evaluate emerging cyber threats, technologies, and regulatory developments to continuously enhance the Bank's security posture.
• Build, mentor, and lead high-performing cybersecurity teams while managing the information security budget and strategic roadmap.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline; Master\'s degree preferred.
• Proven experience leading enterprise cybersecurity programs
• Strong knowledge of banking technologies, cloud security, network security, application security, IAM, data protection, and security architecture.
• Deep understanding of banking regulations, technology risk management, and cybersecurity governance.