Cybersecurity Governance Lead – Global Risk & ISMS

Michael Page; Taguig; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

Michael Page in Manila is seeking a cybersecurity governance professional to shape enterprise governance practices and ISMS processes. You will partner with business and IT stakeholders to mature security controls and drive a culture of continuous improvement.

The role requires 4+ years in cybersecurity governance, deep knowledge of ISO 27001 and NIST, and strong stakeholder engagement. You will contribute to global governance initiatives within a large, technology-forward enterprise.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related discipline.
• 4+ years' experience in cybersecurity governance or information security.
• Strong knowledge of ISO 27001, NIST, and governance frameworks.
• Proven experience with ISMS management and cyber risk programmes.
• Excellent stakeholder engagement and communication skills.
• Strong project management capability across business and technology teams.
• Ability to influence senior leaders and drive organisational change.

Responsibilities

• Manage and enhance the organisation's cybersecurity governance and ISMS framework.
• Develop and maintain security policies, standards, and governance processes.
• Identify, assess, monitor, and report cybersecurity risks.
• Conduct security assessments and compliance reviews across business functions.
• Ensure alignment with security standards, regulations, and internal requirements.
• Partner with stakeholders to strengthen governance and risk management practices.
• Drive continuous improvement across cybersecurity processes and controls.

Skills

Stakeholder engagement

Project management

Communication skills

Security governance

Education

Bachelor's degree in Computer Science / IT

Tools

ISMS management

Job description

Michael Page in Manila is seeking a cybersecurity governance professional to shape enterprise governance practices and ISMS processes. You will partner with business and IT stakeholders to mature security controls and drive a culture of continuous improvement.

The role requires 4+ years in cybersecurity governance, deep knowledge of ISO 27001 and NIST, and strong stakeholder engagement. You will contribute to global governance initiatives within a large, technology-forward enterprise.