Information Security Officer

Equicom Savings Bank, Inc.; Makati; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Equicom Savings Bank, Inc. seeks an Information Security Officer to lead protection of information assets and infrastructure.

You will develop and maintain the Information Security Management Program (ISMP), and establish security policies, standards, and procedures aligned with ISO 27001, NIST, and COBIT. Responsibilities include risk assessments, threat analysis, vulnerability management, audits, incident response, and security awareness programs to ensure regulatory compliance and robust

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems.
• 5–10+ years of experience in information security, IT risk management, and cybersecurity operations.
• Experience in regulated environments (banking/financial services/healthcare) preferred.
• Experience with risk assessments, security governance, incident response, and vulnerability management.
• Strong communication and reporting skills; ability to present to executives and board members.
• Decision-making under pressure; team leadership and cross-functional collaboration.
• Experience with core banking systems; fraud prevention knowledge.
• Business continuity and disaster recovery planning; third‑party/vendor risk management.

Responsibilities

• Protect organization’s information assets, systems, and infrastructure from cyber threats and regulatory violations.
• Develop, implement, and maintain the Information Security Management Program (ISMP).
• Establish security policies, standards, and procedures; align with ISO 27001, NIST, and COBIT.
• Define data classification and protection standards; conduct risk assessments and threat analysis.
• Identify vulnerabilities and recommend risk mitigation; maintain risk register; ensure regulatory compliance.
• Coordinate internal and external security audits; address findings and implement corrective actions.
• Maintain incident response plan; investigate security breaches and coordinate containment, eradication, and recovery.
• Conduct vulnerability scans, penetration tests, and employee cybersecurity awareness programs.

Skills

Strong communication

Team leadership

Cross-functional teamwork

Executive presentation

Education

Bachelor’s degree in IT/CS/Cybersecurity

Job description

Information Security Officer

Job Descriptions:

Responsible for protecting an organization’s information assets, systems, and infrastructure from cyber threats, data breaches, and regulatory violations.

Develop, implement, and maintain the organization’s Information Security Management Program (ISMP)

Establish security policies, standards, and procedures

Ensure alignment with frameworks like ISO 27001, NIST, and COBIT

Define data classification and protection standards

Conduct regular risk assessments and threat analysis

Identify vulnerabilities in systems, networks, and applications

Recommend risk mitigation strategies

Maintain and update the organization’s risk register

Ensure compliance with applicable laws and regulations (e.g., data privacy laws, financial regulations)

Coordinate internal and external security audits

Address audit findings and implement corrective actions

Maintain documentation for compliance reporting

Develop and maintain an incident response plan

Investigate security breaches and cyber incidents

Coordinate containment, eradication, and recovery efforts

Conduct post-incident reviews and reporting

Endpoint protection solutions

Monitor suspicious activities and respond to alerts

Conduct vulnerability scans and penetration tests

Conduct employee cybersecurity awareness programs

Train staff on phishing prevention and secure practices

Promote a culture of security within the organization

Educational Background:

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems

5–10+ years of experience in: Information security, IT risk management, Cybersecurity operations

Prior experience in a regulated environment (banking, financial services, healthcare) is highly preferred

Experience in: Risk assessments, Security governance. Incident response, Vulnerability management

Strong communication and reporting skills

Ability to present to executives and board members

Decision‑making under pressure

Team leadership and cross‑functional collaboration

Experience with core banking systems

Fraud prevention knowledge

Business continuity & disaster recovery planning

Third‑party/vendor risk management