Cyber Governance & Risk Lead (ISMS)

TASQ; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

TASQ in Metro Manila is seeking an experienced Information Security professional to lead ISMS governance and cybersecurity initiatives. The role focuses on defining, maintaining, and improving security rules, overseeing regulatory alignment, and performing risk assessments across the organization.

The ideal candidate has a strong background in IT security infrastructure, standards compliance, and stakeholder management, with proven ability to manage governance programs and drive improvements.

Qualifications

• Academic degree in a relevant field and security certifications are desirable.
• Several years of experience in Information Security Management Systems.
• Strong knowledge of IT infrastructure, cybersecurity standards (ISO27001, NIST, NIS2).

Responsibilities

• Define, maintain, and continuously improve ISMS rules, procedures, and processes.
• Take over lifecycle management of the Cybersecurity Rule Landscape.
• Manage and evolve the regulatory landscape as an efficient regulatory system for cybersecurity.
• Implement and execute rule adherence measurement processes.
• Execute cybersecurity assessments.
• Exert policy authority on cybersecurity topics.
• Assess and process security exceptions.
• Work with various data sources to identify cyber risks within the organization.
• Conduct cyber risk assessments and prioritize risks by potential impact.
• Further develop the IT Service framework for cyber risk management.
• Actively track cyber risks and evaluate mitigation effectiveness.
• Support management of the company's external security posture.

Skills

ISMS governance

Cybersecurity governance

Regulatory awareness

Risk assessment

Stakeholder management

English fluency

Education

Bachelor's degree in Information Security or related field

CISM or equivalent certification

Job description

TASQ in Metro Manila is seeking an experienced Information Security professional to lead ISMS governance and cybersecurity initiatives. The role focuses on defining, maintaining, and improving security rules, overseeing regulatory alignment, and performing risk assessments across the organization.

The ideal candidate has a strong background in IT security infrastructure, standards compliance, and stakeholder management, with proven ability to manage governance programs and drive improvements.