Information Security Officer

Solera Holdings, LLC.; España; On-site; PHP 3,685,503 - 4,914,004; Full time

Job summary

Solera Holdings, LLC. in Philippines is seeking an Information Security Officer to manage and enhance the ISO/IEC 27001 Information Security Management System (ISMS). This role involves ensuring ongoing audit readiness, leading the implementation of TISAX, and fostering a strong security culture across business operations. Ideal candidates have proven experience in ISO/IEC 27001 management, excellent communication skills, and the ability to influence diverse audiences. Join Solera to play a critical role in global security and compliance efforts.

Qualifications

• Proven experience managing and maintaining an ISO/IEC 27001-certified ISMS.
• Strong understanding of information security principles and risk management.
• Excellent communication skills to influence technical and non-technical audiences.

Responsibilities

• Own and enhance Solera's ISO/IEC 27001 ISMS including policies and controls.
• Ensure ongoing audit readiness and drive remediation of findings.
• Lead implementation of TISAX including stakeholder alignment.

Skills

Managing ISO/IEC 27001-certified ISMS

Understanding of information security principles

Experience working with auditors

Organizational skills

Excellent communication skills

Proactive mindset

Job description

Solera is a global leader in data and software services that strives to transform every touchpoint of the vehicle lifecycle into a connected digital experience. In addition, we provide products and services to protect life’s other most important assets: homes and digital identities.

Today, Solera processes over 300 million digital transactions annually for approximately 235,000 partners and customers in more than 90 countries. Our 6,500 team members foster an innovative culture focused on delivering cognitive answers, insights, algorithms, and automation to drive the future forward.

The Role

The Information Security Officer plays a critical role in strengthening and scaling Solera’s global security and compliance posture. This position is responsible for owning and advancing our Information Security Management System (ISMS), ensuring continued ISO/IEC 27001 certification, and leading the implementation of TISAX across the organization.

This role partners cross-functionally to embed security into business operations, ensuring consistent, audit-ready governance across multiple regions and business units.

What You’ll Do

• Own and continuously enhance Solera’s ISO/IEC 27001 Information Security Management System (ISMS), including policies, controls, risk assessments, and documentation
• Ensure ongoing audit readiness by coordinating internal audits, supporting external certification and surveillance audits, and driving timely remediation of findings
• Lead the end-to-end implementation of TISAX, including scope definition, gap assessments, stakeholder alignment, and successful certification
• Establish and maintain a robust risk management framework, ensuring risks are identified, assessed, and mitigated appropriately
• Partner with IT, Engineering, Legal, Procurement, and business leaders to integrate security and compliance requirements into daily operations and third-party/vendor management
• Provide guidance and education to stakeholders to promote a strong security culture and awareness across the organization
• Monitor evolving regulatory and industry standards to ensure ongoing compliance and continuous improvement

What You’ll Bring

• Proven experience managing and maintaining an ISO/IEC 27001-certified ISMS within a global or multi-entity environment
• Strong understanding of information security principles, risk management, and audit processes
• Experience working directly with auditors, certification bodies, and cross-functional stakeholders
• Ability to translate complex security requirements into practical, business-aligned solutions
• Strong organizational skills with a detail-oriented and structured approach to execution
• Excellent communication skills with the ability to influence both technical and non-technical audiences
• A proactive, ownership-driven mindset with the ability to operate independently and drive initiatives forward

It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.