Information Security Manager

Gratitude Philippines; Taguig; On-site; PHP 558,000 - 892,800; Full time

Benefits offered by this job

Equity Incentive Plan

Performance Bonus

HMO

Annual Company Trip

Job summary

A leading tech company in Taguig is seeking a skilled professional to support governance, risk, and compliance initiatives in Information Security. The ideal candidate will possess a Bachelor's degree, preferably with a Master's, and have 5-7 years of relevant experience. Responsibilities include conducting risk assessments, coordinating audits, and collaborating with teams on incident responses. Strong communication skills and familiarity with cybersecurity concepts are essential. This hybrid role offers both onsite and flexible working conditions.

Qualifications

• Bachelor’s degree in relevant field; Master’s preferred.
• 5–7 years in Information Security, Risk, or Compliance.
• Certifications such as ISO27001, CISA, CISSP are a plus.

Responsibilities

• Support Security Business Partners in governance initiatives.
• Conduct risk assessments and vulnerability tracking.
• Coordinate internal and external security audits.

Skills

Strong communication

Analytical problem-solving

Understanding of information security principles

Familiarity with BCP/DR planning

Education

Bachelor's in engineering/science, Computer Science, Cybersecurity, or related field

Tools

Vulnerability management tools

SIEM

Firewalls

Job description

Hybrid - Taguig 5-10 Yrs Exp Bachelor Full-time

Job Description

Employee Recognition and Rewards

• Equity Incentive Plan
• Performance Bonus
• Incentives

Insurance Health & Wellness

• HMO
• Annual Company Trip
• Free Meals
• Sleeping Quarters

Qualifications

• Bachelor’s in engineering/science, Computer Science, Cybersecurity, or related field (Master’s preferred).
• BPO experience is preferred but not required.
• Certifications such as ISO27001, CISA, CISSP, CISSP, or BCP/DR-related certifications (e.g., CBCP, ISO 22301 Lead Implementer) are a plus.
• 5–7 years in Information Security, Risk, or Compliance functions
• Familiarity with BCP/DR planning, testing, and integration into risk management and audit functions.
• Exposure to cybersecurity concepts, SIEM, firewalls, and vulnerability management tools, with the ability to work alongside SOC/technical teams.
• Understanding of information security principles, GRC frameworks (ISO 27001, NIST, CIS, PCI-DSS), and risk assessment methodologies
• Awareness of cloud security principles, regulatory requirements, and emerging technologies like AI in compliance and resilience contexts.
• Strong communication, analytical problem-solving, and ability to translate security and risk concepts for diverse business stakeholders.
• Reject applicants with frequent job switching or serial job-hoppers
• Must not currently or formerly be employed with CGI
• No active recent application with CGI
• Should be amenable to work onsite on a hybrid setup in Taguig
• Amenable to mid-shift schedule

Job Description

• Support Security Business Partners in delivering governance, risk, and compliance initiatives.
• Conduct risk assessments, vulnerability tracking, and remediation follow-ups.
• Coordinate security audits (internal and external), ensuring evidence collection and compliance reporting.
• Assist in developing, testing, and maintaining Business Continuity Plans (BCP) and Disaster Recovery (DR) exercises to ensure organizational resilience.
• Collaborate with technical and business teams during incident response, focusing on process coordination.
• Prepare reports, dashboards, and documentation to support compliance, audit readiness, and executive reporting.
• Contribute to security awareness and compliance training initiatives across the enterprise.
• Align security processes with frameworks such as NIST, ISO 27001, CIS Controls, and relevant regulatory requirements.

If the position requires you to work overseas, please be vigilant and beware of fraud.

Tips

If you encounter an employer who has the following actions during your job search, please report it immediately

• withholds your ID,
• requires you to provide a guarantee or collects property,
• forces you to invest or raise funds,
• collects illicit benefits,
• or other illegal situations.