Head of Technology & Cybersecurity

Pleco Inc; Manila; On-site; PHP 2,500,000 - 4,200,000; Full time

Job summary

Pleco Inc. is seeking a Head of Technology & Cybersecurity to lead the organisation's technology direction, security posture and risk management. The role reports to the CEO and sits above IT management, guiding infrastructure, cloud, applications and digital enablement.

The successful candidate will blend strong cybersecurity expertise with commercial acumen and senior stakeholder engagement to drive security, resilience and business performance through technology.

Qualifications

• Significant experience in a senior IT, technology or cybersecurity leadership role.
• Strong understanding of IT infrastructure, cloud, networks, applications and IT operations.
• Strong practical understanding of cybersecurity principles, controls, risk management and incident response.
• Experience developing and implementing technology strategies and roadmaps.
• Experience managing technology vendors, budgets and third‑party service providers.
• Demonstrated experience managing technology risk, governance and compliance.

Responsibilities

• Lead technology strategy, roadmap and executive-level direction for IT operations, infrastructure, cloud, networks and user technology.
• Own and drive the cybersecurity strategy, risk framework and improvement roadmap across the organisation.
• Oversee IT service delivery, incident management, change control and continual service improvements.
• Ensure resilience, scalability, security and performance of technology environments.
• Manage vendor contracts, performance and technology investments to maximise value.
• Communicate complex technology and security matters clearly to senior leadership and stakeholders.

Skills

IT leadership

Cybersecurity

Cloud & infra

Risk management

Vendor management

Stakeholder management

Incidence response

Education

Relevant tertiary qualification in IT / Cybersecurity / CS

Job description

Position Overview

The Head of Technology & Cybersecurity is a senior technology leadership role responsible for the strategic direction, operational performance, security and continuous improvement of the organisation's technology environment.

Reporting to the CEO, the role sits one level above an IT Manager and provides broader leadership across technology operations, infrastructure, cybersecurity, technology risk, vendors and digital enablement.

The role will ensure technology services are secure, reliable, scalable and aligned with organisational priorities, while proactively identifying opportunities to improve business performance through technology.

The successful candidate will combine strong technical and cybersecurity knowledge with commercial awareness, leadership capability and the ability to engage effectively with senior stakeholders.

Key Responsibilities

Technology Leadership & Strategy

• Develop and maintain the organisation's technology strategy and roadmap in alignment with business objectives.

• Provide senior leadership and direction across IT operations, infrastructure, cloud, applications, networks, end-user technology and technology services.

• Translate business requirements into practical technology solutions and investment priorities.

• Lead technology improvement and transformation initiatives that enhance efficiency, resilience, security and user experience.

• Establish appropriate technology standards, architecture principles and operating practices.

• Provide technology advice and recommendations to senior leadership and executive stakeholders.
  

Cybersecurity & Technology Risk

• Own and lead the organisation's cybersecurity strategy, framework and improvement roadmap.

• Identify, assess and manage technology and cybersecurity risks across the organisation.

• Establish and maintain appropriate security controls, policies, standards and procedures.

• Oversee identity and access management, endpoint security, network security, cloud security, data protection and vulnerability management.

• Lead cybersecurity incident response, investigation, remediation and post-incident improvement.

• Maintain an effective security awareness and education program for employees.

• Monitor emerging cybersecurity threats and assess their potential impact on the organisation.

• Ensure appropriate compliance with relevant legislation, regulations, standards and contractual obligations.
  

IT Operations & Service Delivery

• Provide leadership and oversight of day-to-day IT operations and service delivery.

• Ensure technology services are reliable, responsive and aligned with agreed service levels.

• Establish appropriate IT service management processes, including incident, problem, change and service request management.

• Monitor technology performance, availability, capacity and service quality.

• Drive continual improvement across IT processes, systems and services.

• Ensure effective support for users, business applications and technology infrastructure.
  

Infrastructure, Cloud & Architecture

• Oversee the organisation's technology infrastructure, networks, cloud platforms, systems and end-user computing environment.

• Develop and maintain appropriate infrastructure and cloud strategies.

• Ensure technology environments are appropriately designed for resilience, scalability, security and performance.

• Lead infrastructure modernisation and technology lifecycle management.

• Ensure appropriate backup, disaster recovery and business continuity capabilities are maintained and tested.
  

Governance, Risk & Compliance

• Develop and maintain appropriate technology governance frameworks.

• Ensure technology policies, standards and procedures remain current and effective.

• Maintain appropriate technology risk registers and remediation plans.

• Coordinate internal and external technology audits and security assessments.

• Provide regular reporting to senior leadership on technology performance, cybersecurity risk, major initiatives and emerging issues.

• Ensure technology investments and decisions are appropriately governed and documented.
  

Vendor & Commercial Management

• Manage key technology and cybersecurity vendors and strategic partners.

• Oversee technology contracts, service agreements, renewals and supplier performance.

• Ensure vendors meet agreed service, security and performance requirements.

• Identify opportunities to optimise technology expenditure and improve value from technology investments.

• Support procurement and commercial negotiations for technology and cybersecurity services.
  

Leadership & People

• Lead, develop and mentor technology and cybersecurity team members.

• Establish clear objectives, accountabilities and performance expectations.

• Build a culture of service excellence, security awareness, continuous improvement and accountability.

• Develop internal capability and ensure appropriate succession and knowledge management.

• Work collaboratively with business leaders and other corporate functions.
  

Key Stakeholder Relationships

The role will work closely with:

• Executive Leadership Team

• Senior business and operational leaders

• Finance and procurement

• Risk, compliance and legal functions

• Head of People & Culture

• External technology and cybersecurity providers

• Auditors and assurance providers

• Technology vendors and strategic partners
  

Key Accountabilities

Success in this role will be measured through:

• Reliability and performance of core technology services

• Reduction and effective management of technology and cybersecurity risk

• Strength and maturity of cybersecurity controls

• Effective response to technology and security incidents

• Delivery of the technology roadmap and strategic initiatives

• User satisfaction and quality of IT service delivery

• Effective management of technology vendors and expenditure

• Technology resilience, disaster recovery and business continuity

• Compliance with relevant technology, security and regulatory requirements

• Development and performance of the technology team
  

Requirements

Skills & Experience

Essential

• Significant experience in a senior IT, technology or cybersecurity leadership role.

• Strong understanding of IT infrastructure, cloud, networks, applications, end-user technology and IT operations.

• Strong practical understanding of cybersecurity principles, controls, risk management and incident response.

• Experience developing and implementing technology strategies and roadmaps.

• Experience managing technology vendors, budgets and third-party service providers.

• Demonstrated experience managing technology risk, governance and compliance.

• Strong leadership and stakeholder management capability.

• Ability to communicate complex technology and cybersecurity matters clearly to non-technical executives and business leaders.

• Strong commercial and strategic thinking combined with practical operational capability.
  

Desirable

• Experience in a regulated or security-sensitive environment.

• Experience with recognised cybersecurity frameworks such as ISO 27001, NIST or the Essential Eight.

• Relevant tertiary qualification in Information Technology, Cybersecurity, Computer Science or a related discipline.

• Relevant professional certifications such as CISSP, CISM, CRISC, ITIL, ISO 27001 or equivalent.

• Experience leading technology transformation or significant technology change programs.
  

Leadership Profile

The ideal candidate will be a pragmatic and commercially minded technology leader who can operate comfortably at both strategic and operational levels.

They will be able to set direction, make sound technology and security decisions, manage risk and investment, and translate technical issues into clear business outcomes.

The role requires someone who can move beyond simply managing IT operations to actively shaping how technology enables the organisation's future.