Global IT & Security Leader (DPO & Privacy)

Compass Experience Labs LLC; Manila; Hybrid; PHP 1,800,000 - 3,200,000; Full time

Job summary

Compass Experience Labs LLC seeks an IT & Information Security Manager / Data Protection Officer (DPO) to lead global IT operations, cybersecurity, privacy, and compliance initiatives. This hybrid leadership role combines strategic oversight with hands-on execution across infrastructure, security governance, and data protection programs.

The candidate will partner with the vCISO, auditors, and stakeholders to maintain SOC 2 Type 2, data privacy compliance, and enterprise security initiatives in

Qualifications

• Minimum 5–7+ years in IT operations, cybersecurity, information security, or infrastructure management.
• Minimum 3 years in a leadership/management role overseeing IT teams.
• Hands-on experience managing SOC 2 Type 2 audits and ongoing compliance.
• Experience serving as or supporting a DPO or privacy compliance function is highly preferred.

Responsibilities

• Lead IT strategy aligned with long-term business objectives.
• Oversee IT operations, infrastructure, cloud services, and enterprise apps.
• Manage relationships with software vendors, MSPs, and partners.
• Own SOC 2 Type 2 compliance program, including evidence collection and auditor coordination.
• Coordinate vulnerability management, incident response, and disaster recovery planning.
• Develop KPIs and manage IT budget to maximize ROI.

Skills

SOC 2 Type 2

IAM

CrowdStrike

Vulnerability Management

Disaster Recovery

Education

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

CISSP

CISM

CISA

Tools

ITIL

Job description

Compass Experience Labs LLC seeks an IT & Information Security Manager / Data Protection Officer (DPO) to lead global IT operations, cybersecurity, privacy, and compliance initiatives. This hybrid leadership role combines strategic oversight with hands-on execution across infrastructure, security governance, and data protection programs.

The candidate will partner with the vCISO, auditors, and stakeholders to maintain SOC 2 Type 2, data privacy compliance, and enterprise security initiatives in