Head of Information Security & Risk

InLife Benefits Insurance Company, Inc.; Makati; On-site; PHP 1,800,000 - 2,700,000; Full time

Job summary

InLife Benefits Insurance Company, Inc. seeks an experienced Information Security leader to develop and oversee security policies, architectures, and risk management across the organization. You will manage a security team, coordinate with auditors and regulators, and drive training to protect data and systems.

The ideal candidate has 5–10 years in information security with leadership experience and certifications such as CISSP or CISM, and a strong grasp of ISO 27001 and NIST frameworks.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or related field.
• 5–10 years in information security with 3–5 years in leadership.
• Advanced knowledge of security frameworks (ISO/IEC 27001, NIST).
• CISSP, CISM, or equivalent certifications preferred.

Responsibilities

• Develop and implement comprehensive information security policies and standards.
• Oversee design, deployment, and maintenance of security infrastructure.
• Conduct risk assessments and vulnerability analyses.
• Manage incident response protocols and investigations.
• Ensure regulatory compliance for insurance sector.
• Lead information security team recruitment and development.
• Liaise with vendors, auditors, and regulators on security matters.
• Conduct security awareness and training programs for staff.
• Monitor emerging threats and technologies to protect the organization.
• Prepare reports for senior management and the board.

Skills

Security leadership

Risk management

Network security

ISO 27001

CISSP/CISM

Incident response

SIEM

Regulatory compliance

Education

Bachelor's degree in IT/CS

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

InLife Benefits Insurance Company, Inc. seeks an experienced Information Security leader to develop and oversee security policies, architectures, and risk management across the organization. You will manage a security team, coordinate with auditors and regulators, and drive training to protect data and systems.

The ideal candidate has 5–10 years in information security with leadership experience and certifications such as CISSP or CISM, and a strong grasp of ISO 27001 and NIST frameworks.