Chief Information Security Officer - Bank - Up to 300K - Makati

weSource Management Consultancy Firm; Makati; On-site; PHP 3,046,680 - 3,649,320; Full time

Job summary

A leading management consultancy in Makati is seeking a Chief Information Security Officer (CISO) to formulate and manage the Information Security Strategic Plan and Program. The CISO will ensure that information security supports business needs while adhering to various security frameworks. Key responsibilities include risk assessment, program development, and leading the information security organization. Candidates should bring at least 8 years of relevant experience and strong skills in security frameworks such as ISO/IEC 27001 and NIST.

Qualifications

• Minimum of 8 years of experience in risk management, information security and IT-related jobs.
• Strong knowledge of ISO/IEC 27001, NIST, PCI-DSS and BSP MORB Section 148.

Responsibilities

• Develop and monitor a comprehensive enterprise information security plan.
• Provide leadership to the enterprise's information security organization.
• Facilitate risk assessment and risk management processes.

Skills

Knowledge of information security management frameworks

Technical acumen

Critical thinking

Interpersonal skills

Presentation skills

Job description

Overview

The Chief Information Security Officer (CISO) shall be the primary responsible for formulating the Information Security Strategic Plan (ISSP) and Information Security Program (ISP) of the bank. He/She shall implement and manage the duly-approved ISSP and ISP. He/She shall coordinate and work with the business process owners and executives across different departments/divisions to ensure that information security requirements support business needs and security systems and processes are working as intended. The CISO is a senior level executive with sufficient authority within the bank. The CISO shall report directly to the Risk Oversight Committee and report administratively to the President. To ensure appropriate segregation of duties, the CISO should perform the task of a risk manager and should be independent from the IT Department.

About the job

Role: Chief Information SecutiryOfficer
Job Rank: Senior Manager to AVP
Industry: Banking
Location: Makati
Set up: Onsite
Schedule: Mon-FriSalary: Up to 300K

Responsibilities

• Develop, implement and monitor a strategic, comprehensive enterprise informationsecurity plan.
• Develop and/or enhance information security programs.
• Provide leadership to the enterprises information security organization.
• Work directly with the business units to facilitate risk assessment and riskmanagement processes.
• Understand and interact with related disciplines through committees to ensure theconsistent application of policies and standards across all technology projects,systems, and services.
• Appropriately assess risk when business decisions are made, demonstratingparticular consideration for the banks reputation.
• Assist with the overall business technology planning, providing a current
• knowledge and future vision of technology and systems.

Experience

Minimum of 8 years of experience in a combination of risk management,information security and IT-related jobs.

Knowledge/Skills/Abilities

• Strong knowledge of information security management frameworks such as, butnot limited to, ISO/IEC 27001, NIST, PCI-DSS and BSP MORB Section 148.
• Demonstrate both technical acumen and critical thinking abilities.
• Strong interpersonal and presentation skills.