Compliance Head (Cybersecurity)

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Hammerjack Pty Ltd seeks a senior Cyber Security Compliance & Assurance leader to oversee ISMS governance, IAM, asset governance, and regulatory alignment, driving audit readiness and continuous improvement of security controls across the organization.

The role directs audit programs, develops governance frameworks, and mentors ISMS auditors, partnering with risk and business teams to strengthen controls and ensure enterprise compliance.

Qualifications

• 5+ years of leadership in IT and cybersecurity.
• Experience leading ISMS audits aligned with ISO/IEC 27001/NIST CSF.
• Cross-functional collaboration with risk, business, and technology teams.

Responsibilities

• Direct ISMS governance, ensuring effective design, implementation, and improvement of controls.
• Lead internal, external, and regulatory audit programs with timely remediation.
• Establish audit governance frameworks, metrics, and reporting.

Skills

Leadership

Governance

Cybersecurity

Risk management

Audit readiness

Education

Bachelor's degree in IT/CS/Engineering/Accountancy

Postgraduate studies in Cybersecurity/Risk Management/Audit/Governance

Job description

Leads the enterprise Cyber Security Compliance Center by setting strategic direction for Information Security Management System (ISMS) governance, audit and assurance, identity and access management, and asset governance. Ensures sustained regulatory compliance, audit readiness, and continuous improvement of security controls across the organization through strong governance, disciplined remediation, and effective stakeholder engagement.

Cyber Security Compliance & Assurance

• Directs enterprise ISMS governance, ensuring effective design, implementation, and continuous improvement in alignment with ISO/IEC 27001 and applicable regulatory and contractual requirements.
• Manages internal, external, and regulatory audit programs, ensuring audit readiness, quality execution, timely closure of findings, and sustainable remediation of compliance gaps.
• Establishes audit governance frameworks, metrics, and reporting to provide transparency on compliance posture and control effectiveness.

Identity, Access & Asset Governance

• Governs enterprise-wide Identity and Access Management (IAM), ensuring secure, compliant, and efficient access to systems and data across the organization.
• Drives adoption of IAM technologies, automation, and control enhancements to support auditability, leastprivilege access, and segregation of duties.
• Oversees asset management and classification governance, ensuring accurate asset identification, valuation, ownership, and registry integrity across the asset lifecycle.

Risk, Control Alignment & Regulatory Conformance

• Ensures alignment of ISMS, asset, and access controls with enterprise risk management, regulatory obligations, and industry standards.
• Interprets evolving regulatory and standards requirements and translates them into practical, auditable control and process enhancements.

Program & Delivery Oversight

• Ensures timely, highquality delivery of compliance assessments and security initiatives in collaboration with Capability and Delivery teams.

People Leadership & Center Management

• Leads, mentors, and develops ISMS auditors, IAM, and asset governance teams, fostering a culture of accountability, continuous improvement, and audit excellence.
• Provides regular performance feedback, supports professional development, and ensures effective succession planning for critical roles.

Operational & Strategic Support

• Provides leadership and subjectmatter expertise for additional initiatives as assigned, ensuring alignment with organizational priorities and cybersecurity strategy.

Qualifications

EDUCATION

• Bachelor's degree in Information Technology, Computer Science, Engineering, Accountancy, or any related course/discipline.
• Postgraduate studies or professional training in Cybersecurity, Risk Management, Audit, or Governance is an advantage.

WORK EXPERIENCE

• Over 5 years of progressive leadership experience in IT and cybersecurity, with strong specialization in ISMS, audit and assurance, Governance, Risk, and Compliance (GRC)
• Proven expertise in leading enterprisewide internal, external, and regulatory audits aligned with ISO/IEC 27001 and NIST CSF, including audit readiness, remediation, and issue closure.
• Demonstrated ability to work across business, technology, and risk teams to strengthen security control maturity and maintain alignment with evolving regulatory and industry standards.