Cybersecurity Program Manager

ContactPoint360; Cebu City; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

ContactPoint360 is seeking a Cybersecurity Program Manager to lead and coordinate enterprise cybersecurity initiatives across IT, security, and business units. You will align security activities with business goals and regulatory requirements, and serve as the main liaison for clients and partners.

The role demands 3+ years in cybersecurity with leadership experience, strong risk and project management skills, and the ability to translate technical risk into business terms for stakeholders.

Qualifications

• 3+ years of cybersecurity experience with at least 2 years in a team-lead role.
• Experience managing third-party/vendor security risk, ideally with large contact center operations or partners.
• Working knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and relevant compliance requirements.

Responsibilities

• Own and continuously improve the company's cybersecurity program, including policies, controls, risk assessments, and incident response plans.
• Develop, implement, and manage enterprise cybersecurity programs and strategic initiatives.
• Lead cross-functional security projects from planning through execution.
• Coordinate internal and external stakeholders to ensure successful delivery of security initiatives.
• Monitor for vulnerabilities and threats across systems and vendor integrations, drive remediation to closure.
• Maintain compliance with relevant frameworks and regulations (SOC 2, ISO 27001, PCI-DSS, GDPR).
• Partner with IT, engineering, and business stakeholders to embed security requirements into projects and vendor onboarding.
• Report program status, risks, and metrics to leadership on a regular cadence.
• Manage security incident response, including investigation, containment, and post-incident review.
• Develop customer-specific security improvement plans.
• Coordinate customer security audits and compliance reviews.

Skills

Cybersecurity leadership

Program management

Risk management

Vendor management

Executive communication

Education

CISSP or CISM preferred

Job description

Cybersecurity Program Manager

JOB SUMMARY:

The Cybersecurity Program Manager is responsible for leading and managing enterprise cybersecurity programs that protect the organization's information assets, technology infrastructure, client environments, and regulatory obligations. This role serves as the primary liaison between Information Technology, Information Security, business stakeholders, and external clients to ensure cybersecurity initiatives are successfully planned, implemented, governed, and maintained.

The Cybersecurity Program Manager oversees security projects, compliance initiatives, risk management activities, customersecurity requirements, third-party security assessments, and continuousimprovement programmes while ensuring alignment with business objectives and industry best practices.

CORE RESPONSIBILITIES:

• Own and continuously improve the company's cybersecurity program, including policies, controls, risk assessments, and incident response plans.
• Develop, implement, and manage enterprise cybersecurity programs and strategic initiatives.
• Lead cross-functional security projects from planning through execution.
• Develop project plans, timelines, budgets, risk registers, and executive status reports.
• Coordinate internal and external stakeholders to ensure successful delivery of security initiatives.
• Monitor for vulnerabilities and threats across systems and vendor integrations, drive remediation to closure.
• Maintain compliance with relevant frameworks and regulations (e.g., SOC 2, ISO 27001, PCI-DSS, GDPR, as applicable).
• Partner with IT, engineering, and business stakeholders to embed security requirements into projects and vendor onboarding.
• Report program status, risks, and metrics to leadership on a regular cadence.
• Manage security incident response, including investigation, containment, and post-incident review.
• Maintain cybersecurity policies, standards, and operational procedures.
• Serve as the primary cybersecurity contact for assigned enterprise customers.
• Support customer security questionnaires and due diligence assessments.
• Coordinate customer security audits and compliance reviews.
• Participate in security governance meetings with clients.
• Develop customer-specific security improvement plans.

REQUIREMENTS/QUALIFICATIONS

• 3+ years of experience in cybersecurity, with at least 2 years in a team-lead capacity.
• Experience managing third-party/vendor security risk, ideally including large-scale contact center operations, as well as delivery, logistics, or platform integration partners.
• Working knowledge of security frameworks (NIST, ISO 27001, CIS Controls) and compliance requirements relevant to the business.
• Strong understanding of network security, identity and access management, and cloud security fundamentals.
• Excellent communication skills, with the ability to translate technical risk into business terms for non-technical stakeholders.
• Relevant certifications (CISSP, CISM, or similar) preferred but not required.

KEY COMPETENCIES

• Exceptional customer service orientation.
• Cybersecurity leadership
• Program and project management
• Risk management
• Security governance
• Compliance management
• Vendor management
• Executive communication
• Continuous improvement
• Strong emphasis on family and team collaboration.
• Keen attention to detail.
• Flexibility in accommodating varied working schedules.
• Exceptional team player.
• Steadfast commitment to moral integrity and honesty.
• Ability to perform effectively in high-pressure situations.

Reporting:

• This role reports to the Global Director of IT and Compliance