Information Security Manager

PSBank Official; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

PSBank is seeking an Information Security professional to develop and maintain security policies, procedures and guidelines within the Information Security Program. You will monitor compliance with local laws and bank regulations, and coordinate with audits to ensure controls meet BSP/MORB requirements.

The role requires at least 4 years in information security or IT, experience in policy development and security awareness initiatives, and proven leadership in guiding teams through risk-based

Qualifications

• 4+ years in Information Security / IT
• Experience in policy development and implementation
• Experience handling security awareness campaigns
• Experience coordinating audits with internal and external auditors

Responsibilities

• Develop and maintain information security policies aligning with business goals
• Ensure compliance with local laws and BSP MORB
• Coordinate with auditors during ISG reviews
• Lead security awareness initiatives

Skills

Information Security

IT Governance

Policy Development

Auditing & Compliance

Team Leadership

Job description

Develop and maintain PSBank’s information security policies, procedures and guidelines as part of the PSBank Information Security Program (ISP). Monitor the company’s compliance to local laws and bank regulations pertaining to information security, copyright and privacy issues. Monitor employee compliance to security policies and ensure that the bank conforms to international Information Security Management System standards. Implement proactive programs that facilitate PSBank’s strategic business and security needs.

II. Job Duties and Responsibilities

• Security Policies – Develop and maintain the information security policies of the bank and ensure that the policies are updated regularly to align with business objectives and adoption of new technologies
• Compliance – Develop and maintain a Compliance Program with the following functions:
• Monitor PSBank’s compliance to local laws and bank regulations pertaining to Information Security
• Single point of contact for ISG to auditors during internal and external audits.
• Ensure that the bank’s information security controls are aligned to applicable best practices, required regulatory requirements (ex. BSP Memo / MORB) and applicable laws (ex. Data privacy act, Bank secrecy law).
• Perform the tasks of a Risk Delegate Alternate (RDA) and Deputy Auxiliary Compliance Officer (DACO) of ISG, in coordination with Risk Management Office (RMO) and Compliance Office.
• Security Awareness Support – Support the ISG Head in maintaining a Security Awareness Program to ensure that PSBank employees, contractors and third-party users are aware of the bank’s security policies and are advised of security-related news through creative advisories.
• Security Organization and Governance – Assist the ISG Head in managing information security within the organization, maintaining the security of the organization’s information and information processing facilities that are accessed, processed, communicated to, or managed by external parties.
• ISP Inquiries – Provide advice and assistance in the interpretation and implementation of information security policies and procedures and related documents. Conduct inquiries into ISP violations/incidents and related ISP business practices, policies and procedures, and recommend corrective/preventive actions to ISG Head.
• ISG Operations Manual – Maintain and update the Group’s Operations Manual
• Key Management Support – Support business units in support processes that requires key management activities (i.e. HSM password and physical keys, CMASS encryption and clear keys, application password)
• Sustainable Finance Framework – Actively participates in the Bank’s sustainable finance – related activities and performs functions as assigned, to help achieve sustainable finance and other sustainability goals of the Bank.
• Additional duties may be assigned based on the Group's or Division's needs, including but not limited to leading ad-hoc projects, providing support for subsidiaries through CISOM, and other duties deemed necessary.

III. Job Qualifications

Experience

• At least 4 years’ significant experience in Information Security / Information Technology
• Must have worked in an environment where IT and InfoSec Controls are audited/reviewed independently of his/her function.
• Developed / reviewed information security policies in the past
• Experienced deploying information security awareness campaigns
• Has experience leading a team

Certification Required / Recommended

• CISA, CISSP or related level of certification (Recommended)

About Us

PSBank is the thrift bank arm of the Metrobank Group. It started as a small neighborhood bank right at the heart of the historic Plaza Miranda in Quiapo, Manila, which used to be the country’s commercial and business hub. We opened our first branch in the area on September 26, 1960. Backing our strength is our parent Metropolitan Bank and Trust Company (Metrobank), the banking arm of GT Capital Holdings, Inc., the publicly listed holding firm of the family of George S.K. Ty. We continue to strive to be the country's consumer and retail bank of choice by innovating our products and services to keep up with our clients' ever-evolving needs. We also aim to be recognized as the banking leader in providing exceptional customer experience at every encounter. We have expanded our presence to over 250 branches and more than 600 ATMs nationwide.