Chief Information Security Officer (CISO)

Career Connect; Philippines; On-site; PHP 405,000 - 495,000; Full time

Job summary

Career Connect is hiring a Chief Information Security Officer (CISO) in the Philippines to design and implement an enterprise information security program protecting communications, systems, and assets. The role partners with executives to ensure compliance with security practices and governance.

The CISO will define cyber risk strategies, lead a skilled security team, and drive initiatives across cloud, containerization, encryption, and security operations.

Qualifications

• Bachelor’s degree in IT, Computer Science, Engineering, or related field.
• CISSP, CISM, CISA and similar information security certifications.

Responsibilities

• Define and own a multi-year cybersecurity roadmap and KPIs to reduce cyber risk.
• Build and lead a diverse cybersecurity team with a culture of trust and continuous improvement.
• Set quarterly, annual, and long-term cyber security and risk goals with executive reporting.

Skills

Cybersecurity leadership

Security governance

Cloud security

Identity & access management

Risk management

Incident response

Education

Bachelor’s degree in IT/CS/Engineering

Information security certifications CISSP/CISM/CISA

Job description

Chief Information Security Officer (CISO)

Full time | Career Connect | Philippines

Posted On 09/04/2026

Job Information

Technology

Work Experience 10+ years

450,000

City Taguig

State/Province National Capital Region (Manila)

NCR

Job Description

POSITION: Chief Information Security Officer

JOB OVERVIEW

The Chief Information Security Officer works with other executives across different departments to design security systems and assets. The CISO’s main responsibility is creating and implementing an information security program that is designed to protect enterprise communications, systems, and assets from any potential threats. He/She will ensure compliance with legal security practices.

JOB DESCRIPTION

• Define and own a multi-year cybersecurity roadmap and key performance indicators focused on reducing cyber risk
• Build and inspire a highly skilled and diverse Cybersecurity team. Foster a culture of trust cross-functional partnership, service, and continuous improvement
• Create quarterly, annual, and long-term cyber security and cyber risk management goals, articulate strategies, define metrics and provide necessary updates to executive leadership
• Partner with leadership for the development, planning, and execution of major security initiatives. Support Yondu’s Secure Software Development Lifecycle
• Collaborate with the SOC team and ISO 27001 Core team to establish appropriate security standards and provide an effective governance structure to ensure cyber compliance and accountability
• Lead Security Incident Response, Third Party Information Security Assessment, Data Protection and Encryption,
• Identity & Access Management and Privileged User Access to protect customer and employee data
• Define cyber security governance and control strategies for emerging technologies such as cloud & containerization, blockchain, etc.
• Keep well informed of developing security threats, and proactively create strategies to understand and mitigate potential security problems that might arise from acquisitions or other big business moves
• Other job-related activities may be assigned from time to time.
  

Requirements

Education – At least graduate with a Bachelor’s Degree in IT, Computer Science, Engineering, or any related course.
Related Work Experience - Key Industry certifications in Information Security, such as CISSP, CISM and CISA
Knowledge – Knowledgeable in security and operations processes.

• 15+ years of experience in Information/Cybersecurity in a public or large private technology company with a global customer base
  
• 7+ years people management experience with hands‑on experience building diverse teams while promoting an inclusive organization
  
• A demonstrated knowledge of information security standards (e.g., NIST, ISO-27001), rules and regulations related to information security and data confidentiality (e.g., PCI, NIST, NSA) and other various security standards and policies
  
• A strong understanding of Cloud Security Mode and key principles, such as CSPs Shared Responsibility Models, Security and Infrastructure as Code, Preventive/Reactive Guardrails, Containerization, Server-less Computing, Continuous monitoring/drift detection, and the importance of end-to-end automation
  
• Strong interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex topics for understanding and critical decision making by Executive Management and the Board
  
• Ability to understand not only emerging industry trends as far as cyber security is concerned but also the landscape of emerging threats, making appropriate adjustments within the cybersecurity program