Cybersecurity Risk Officer

Rockwell Land Corporation; Makati; On-site; PHP 670,000 - 1,339,000; Full time

Job summary

Rockwell Land Corporation is seeking a Cybersecurity Risk Officer to strengthen our security posture and protect against evolving threats. You will assess and manage cybersecurity risks, oversee third-party security, and support business continuity and incident response efforts.

The role requires hands-on risk management experience, familiarity with ISO 27001 and NIST CSF, and the ability to communicate risks to stakeholders across the organization.

Qualifications

• Bachelor’s degree in IT, CS, or related field.
• 3+ years in cybersecurity risk management; 1-2 years IT operations.
• Solid knowledge of ISO 27001, NIST CSF, GDPR, DPA2012.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Implement and maintain cybersecurity risk management frameworks.
• Conduct vulnerability scans, pen tests, and risk assessments.
• Maintain the risk register and track remediation.
• Coordinate with stakeholders and vendors on risk issues.
• Ensure BC/DR plans integrate controls.
• Report KRIs and communicate risks to leadership.
• Oversee third-party security and regulatory compliance.

Education

Bachelor's degree in IT/CS

Tools

Cybersecurity tools

Job description

We’re looking for a Cybersecurity Risk Officer to strengthen our organization’s security posture and ensure robust protection against evolving cyber threats. You’ll assess and manage cybersecurity risks, oversee third-party security, and support business continuity and incident response efforts.

Key Responsibilities

• Implement and maintain cybersecurity risk management frameworks and policies.
• Conduct vulnerability scans, penetration testing, and ongoing risk assessments.
• Maintain and update the cybersecurity risk register and track remediation efforts.
• Manage risk acceptance and exception processes, and report key risk indicators (KRIs).
• Assess and monitor third-party vendors for security and regulatory compliance (ISO 27001, SOC 2, GDPR, DPA2012).
• Ensure cybersecurity controls are integrated into business continuity and disaster recovery (BC/DR) plans.
• Support incident response planning and coordinate with internal teams and vendors.
• Communicate risks, findings, and mitigation strategies to stakeholders across the organization.

Qualifications

• Bachelor’s degree in Information Technology, Computer Engineering, or related field.
• 3+ years of cybersecurity risk management experience and 1-2 years in IT operations.
• Solid knowledge of cybersecurity frameworks (ISO 27001, NIST CSF) and data protection laws (GDPR, DPA2012).
• Strong analytical, problem-solving, and communication skills.
• Familiar with cybersecurity tools, technologies, and IT infrastructure.
• Entry-level certification preferred (e.g., CompTIA Security+ or equivalent).
• Able to manage multiple priorities and meet tight deadlines.