Information Security Governance & Policy Lead

Metropolitan Bank & Trust Company; Metro Manila; On-site; PHP 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Restaurant staff

Job summary

Metrobank is seeking a seasoned Information Security professional to shape and enforce its security governance framework in the Philippines. You will formulate policies, oversee compliance with BSP, DPA, PCI-DSS, and drive security awareness across the organization.

As a key liaison with regulatory bodies and business units, you will monitor progress of strategic initiatives, close audit gaps, and champion secure software development and data protection practices.

Qualifications

• Experience in Information Security Governance, Risk Management, Compliance, Audit, and Policy Management.
• Knowledge of BSP, DPA, PCI-DSS regulations.
• Familiarity with banking operations, IT processes, access controls, data security.
• Experience designing security awareness, training, and advocacy programs.
• Strong analytical, problem-solving, and project management skills.
• Excellent written and verbal communication.
• Certifications such as CISM or CRISC preferred.
• Proficiency with MS Office (Word, Excel, PowerPoint, Project).
• Self-motivated, detail-oriented, able to manage multiple priorities in fast-paced environment.

Responsibilities

• Develop, review, and recommend information security policies, standards, and procedures.
• Identify policy gaps related to physical/environmental/personnel security and SDLC.
• Design and enhance the Information Security Awareness Program.
• Create and manage security awareness materials for organization-wide communication.
• Evaluate effectiveness of awareness initiatives and propose improvements.
• Collaborate with business units to align with governance, risk, and compliance.
• Liaise with regulatory and compliance requirements (BSP).
• Monitor progress of departmental plans and initiatives.
• Support remediation of audit findings and security gaps.
• Assist Department Head in overseeing key initiatives and milestones.

Job description

Metrobank is seeking a seasoned Information Security professional to shape and enforce its security governance framework in the Philippines. You will formulate policies, oversee compliance with BSP, DPA, PCI-DSS, and drive security awareness across the organization.

As a key liaison with regulatory bodies and business units, you will monitor progress of strategic initiatives, close audit gaps, and champion secure software development and data protection practices.