Chief Information Security Officer

Malayan Savings Bank; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Malayan Savings Bank is seeking a Chief Information Security Officer to lead the organization’s information security and cybersecurity strategy. The role partners with executive leadership to strengthen cyber resilience, manage enterprise risk, and support secure digital transformation initiatives.

The candidate will build and lead high-performing cybersecurity teams, oversee governance and controls, and ensure compliance with banking regulations and standards.

Qualifications

• Bachelor’s degree in CS/InfoSec/IT or related field.
• Proven experience leading enterprise cybersecurity programs.
• Strong knowledge of banking tech, cloud, network, IAM, data protection, and security architecture.
• Deep understanding of banking regulations and risk management.

Responsibilities

• Develop and execute enterprise information security strategy.
• Oversee cybersecurity governance, policies, standards, controls.
• Lead enterprise cyber risk management and security operations.
• Provide cybersecurity risk reporting to executives, boards, and regulators.
• Lead incident preparedness, continuity, and disaster recovery.
• Promote security awareness across the organization.
• Evaluate emerging threats and regulatory developments.
• Build and lead cybersecurity teams and manage budget.

Skills

Enterprise cybersecurity

Banking tech knowledge

Cloud security

IAM

Security governance

Incident response

Education

Bachelor’s degree in CS/IT/InfoSec

Master’s degree preferred

Job description

We are seeking an accomplished Chief Information Security Officer (CISO) to lead the Bank's enterprise information and cybersecurity strategy. The CISO will be responsible for safeguarding the Bank's information assets, digital platforms, customer data, and critical infrastructure while ensuring compliance with applicable regulatory requirements and industry standards.

Reporting to executive leadership, the CISO will partner with business, technology, risk, audit, and compliance teams to strengthen the Bank's cyber resilience, manage enterprise cyber risk, and support secure digital transformation initiatives.

Key Responsibilities

• Develop and execute the Bank's enterprise information security and cybersecurity strategy aligned with business objectives and regulatory expectations.
• Establish and oversee the Bank's cybersecurity governance framework, policies, standards, and controls.
• Lead enterprise cyber risk management, security operations, threat intelligence, vulnerability management, identity and access management, and incident response.
• Provide regular cybersecurity risk reporting, key metrics, and strategic recommendations to Executive Management, Board Committees, and regulators.
• Lead cyber incident preparedness, crisis management, business continuity, and disaster recovery planning.
• Promote a culture of security awareness across the organization through education, governance, and secure-by-design practices.
• Evaluate emerging cyber threats, technologies, and regulatory developments to continuously enhance the Bank's security posture.
• Build, mentor, and lead high-performing cybersecurity teams while managing the information security budget and strategic roadmap.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline; Master's degree preferred.
• Proven experience leading enterprise cybersecurity programs
• Strong knowledge of banking technologies, cloud security, network security, application security, IAM, data protection, and security architecture.
• Deep understanding of banking regulations, technology risk management, and cybersecurity governance.