Information Security & Compliance Lead

Asticom Technology Inc; Taguig; Hybrid; PHP 2,500,000 - 4,000,000; Full time

Job summary

Asticom Technology Inc in Taguig, Metro Manila, is seeking an senior information security leader to guide the enterprise's security strategy, risk management, and governance.

You will translate complex security risks into business terms for senior leadership and collaborate across functions to strengthen controls, privacy, and incident response.

The role emphasizes building robust security architectures and aligning with ISO/NIST standards and data privacy laws.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 6–8+ years of experience in information security, IT governance, or risk management, with at least 2–3 years in a leadership or lead capacity.
• Minimum of one advanced industry certification is highly preferred (CISSP, CISM, CISA, CRISC, or ISO 27001 and ISO 2000-1 Lead Implementer).
• Deep knowledge of security architectures, vulnerability management tools, cloud security (AWS/Azure), SIEM systems, and network infrastructure.
• Strong working knowledge of security frameworks and privacy laws (ISO 27001, ISO 2000-1 SOC 2 Type II, NIST, GDPR, Data Privacy Act).
• Exceptional stakeholder communication skills, cross-functional collaboration, and the ability to translate complex technical risks into business impact for senior leadership.

Skills

Security architectures

Vulnerability management

Cloud security

SIEM

Network infrastructure

Stakeholder communication

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

SIEM systems

Job description

Educational Background

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Experience Requirements

• 6–8+ years of experience in information security, IT governance, or risk management, with at least 2–3 years in a leadership or lead capacity

Certifications (Preferred)

• Minimum of one advanced industry certification is highly preferred (CISSP, CISM, CISA, CRISC, or ISO 27001 and ISO 2000-1 Lead Implementer).

Technical & Privacy Skills

• Deep knowledge of security architectures, vulnerability management tools, cloud security (AWS/Azure), SIEM systems, and network infrastructure.
• Strong working knowledge of security frameworks and privacy laws (ISO 27001, ISO 2000-1 SOC 2 Type II, NIST, GDPR, Data Privacy Act).

Soft Skills

• Exceptional stakeholder communication skills, cross-functional collaboration, and the ability to translate complex technical risks into business impact for senior leadership.