Information Security Manager

InLife Benefits Insurance Company, Inc.; Makati; On-site; PHP 1,800,000 - 2,700,000; Full time

Job summary

InLife Benefits Insurance Company, Inc. seeks an experienced Information Security leader to develop and oversee security policies, architectures, and risk management across the organization. You will manage a security team, coordinate with auditors and regulators, and drive training to protect data and systems.

The ideal candidate has 5–10 years in information security with leadership experience and certifications such as CISSP or CISM, and a strong grasp of ISO 27001 and NIST frameworks.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or related field.
• 5–10 years in information security with 3–5 years in leadership.
• Advanced knowledge of security frameworks (ISO/IEC 27001, NIST).
• CISSP, CISM, or equivalent certifications preferred.

Responsibilities

• Develop and implement comprehensive information security policies and standards.
• Oversee design, deployment, and maintenance of security infrastructure.
• Conduct risk assessments and vulnerability analyses.
• Manage incident response protocols and investigations.
• Ensure regulatory compliance for insurance sector.
• Lead information security team recruitment and development.
• Liaise with vendors, auditors, and regulators on security matters.
• Conduct security awareness and training programs for staff.
• Monitor emerging threats and technologies to protect the organization.
• Prepare reports for senior management and the board.

Skills

Security leadership

Risk management

Network security

ISO 27001

CISSP/CISM

Incident response

SIEM

Regulatory compliance

Education

Bachelor's degree in IT/CS

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

Key responsibilities

• Developing and implementing comprehensive information security policies, procedures, and standards aligned with industry best practices and regulatory requirements


• Overseeing the design, deployment, and maintenance of security infrastructure, including firewalls, intrusion detection systems, and access control mechanisms


• Conducting regular security risk assessments and vulnerability analyses to identify potential threats and weaknesses in systems and processes


• Managing incident response protocols and leading investigations into security breaches or unauthorised access attempts


• Ensuring compliance with relevant regulatory frameworks, industry standards, and data protection legislation applicable to the insurance sector


• Leading and supervising the information security team, including recruitment, training, performance management, and professional development


• Liaising with external vendors, auditors, and regulatory bodies regarding security matters and compliance obligations


• Conducting security awareness and training programmes for employees across all levels of the organisation


• Monitoring and evaluating emerging security threats and technologies to ensure the organisation remains protected against current and future risks


• Preparing regular reports and presentations for senior management and the board on security performance, incidents, and recommendations

About you

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline


• Minimum of 5-10 years of professional experience in information security roles, with at least 3-5 years in a management or leadership capacity


• Advanced knowledge of security frameworks and standards, such as ISO/IEC 27001, NIST Cybersecurity Framework, or similar industry-recognised certifications


• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent recognised qualifications


• Demonstrated expertise in risk management, threat analysis, and vulnerability assessment methodologies


• Strong understanding of network security, application security, database security, and infrastructure protection


• Experience with security tools and technologies, including firewalls, intrusion detection/prevention systems, security information and event management (SIEM) platforms, and endpoint protection solutions


• Proven ability to develop and communicate security strategies to both technical and non-technical stakeholders


• Experience in managing and leading technical teams, including hiring, training, and performance evaluation


• Knowledge of regulatory compliance requirements in the insurance or financial services industry is highly desirable


• Strong analytical, problem-solving, and critical thinking skills with the ability to make sound decisions under pressure


• Excellent written and verbal communication skills with the ability to present complex security concepts in an accessible manner.