Information Security Manager Baguio City Full-time, Office-based

Fullsuite; Baguio; On-site; PHP 2,000,000 - 4,000,000; Full time

Job summary

FullSuite is seeking an experienced Information Security Manager to lead our cybersecurity strategy and oversee daily security operations. You will bridge business priorities with technical defense by managing policies, risk assessments, compliance frameworks, and incident response efforts.

You will direct governance, incident response, audits, and risk management while partnering with IT/DevOps to embed security across cloud and system architectures.

Qualifications

• 5+ years in cybersecurity, with at least 2+ years in a team lead or managerial capacity.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• Certifications (At least one required/preferred): CISM, CISSP, CRISC, or CISA.
• Deep understanding of cloud security (AWS/Azure/GCP), network security, identity management, and threat landscapes.
• Strong communication skills to explain complex technical risks to non-technical stakeholders.

Responsibilities

• Governance and Policy: Develop, enforce, and update company-wide information security policies and procedures aligned with industry standards (SOC 2, ISO 27001, and GDPR).
• Incident Response: Lead the incident response team, manage security incident protocols, and conduct post-incident root-cause analysis.
• Compliance and Audits: Ensure compliance with applicable standards (SOC 2, GDPR, ISO 27001) and act as the primary contact for external audits.
• Risk Management: Conduct regular risk assessments, vulnerability scans, and third-party vendor security reviews to prioritize and mitigate risks.
• Security Architecture & Tools: Oversee security tools and partner with IT/DevOps to embed security into cloud and system architectures.
• Team Leadership and Culture: Manage, mentor, and grow the security team while driving company-wide security awareness and phishing training programs.

Skills

Governance

Policy development

Incident response

Risk assessment

Vulnerability scanning

Third-party risk

Security architecture

Cloud security

Team leadership

Security training

Communication

Education

Bachelor’s degree in Cybersecurity, Computer Science, IT

Tools

SIEM

Vulnerability scanners

Audit management tools

Job description

FullSuite is the expert data quality partner behind AI-native private market startups. We scale judgment across their workflows and data pipelines, keeping the AIs behind the world's high-stakes transactions truthful from MVP to maturity. Since 2018, FullSuite has kept over 1.2 million documents decision-grade, across $50 billion in assets serviced.As we scale, we are seeking an experienced Information Security Manager to lead our cybersecurity strategy, oversee daily security operations, and protect our critical infrastructure, data, and applications. In this role, you will bridge the gap between business priorities and technical defense—managing security policies, risk assessments, compliance frameworks, and incident response efforts.

What You’ll Do

• Governance and Policy: Develop, enforce, and update company-wide information security policies and procedures aligned with industry standards (SOC 2, ISO 27001, and GDPR).
• Incident Response: Lead the incident response team, manage security incident protocols, and conduct post-incident root-cause analysis.
• Compliance and Audits: Ensure compliance with applicable standards (e.g., SOC 2,GDPR, ISO 27001) and act as the primary point of contact for external audits.
• Risk Management: Conduct regular risk assessments, vulnerability scans, and third-party vendor security reviews to prioritize and mitigate risks.
• Security Architecture & Tools: Oversee security tools and partner with IT/DevOps to embed security into cloud and system architectures.
• Team Leadership and Culture: Manage, mentor, and grow the security team while driving company-wide security awareness and phishing training programs.

What You’ll Bring

• Experience: 5+ years in cybersecurity, with at least 2+ years in a team lead or managerial capacity.
• Education: Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• Certifications (At least one required/preferred): CISM, CISSP, CRISC, or CISA.
• Technical Knowledge: Deep understanding of cloud security (AWS/Azure/GCP), network security, identity management, and threat landscapes.
• Communication: Ability to explain complex technical risks in clear, business-focused terms to non-technical stakeholders and leadership.

Preferred Qualifications

• Hands-on experience preparing an organization for SOC 2 Type II or ISO 27001 certification from scratch.
• Background in software development security (DevSecOps) or secure code review.