InfoSec & Data Protection Lead

SyCip Salazar Hernandez & Gatmaitan; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

SyCip Salazar Hernandez & Gatmaitan seeks an Information Security and Data Protection Specialist to lead policy creation, governance and business continuity planning. You will formalize security controls, coordinate cross‑functional teams, and drive risk-based security programs across the firm.

The role requires a CS/IT degree and at least 3 years in information security management; CISSP preferred. You will conduct audits, handle data privacy compliance, and act as the DPA liaison with lawyers

Qualifications

• Candidate must be a graduate of Computer Science, Computer Engineering, Information Technology, or a related field.
• CISSP certification is preferred.
• At least 3 years of relevant experience in information security management and/or disaster recovery.

Responsibilities

• Establish, document, communicate and maintain information security policies, processes and procedures, including a business continuity and disaster recovery plan.
• Create and update policies and procedures in all information security systems related documents.
• Coordinate with all teams to ensure the implementation of information security programs.
• Coordinate the review of service level agreements of all suppliers / providers relating to information security.
• Coordinate with business process owners in identifying and updating information security assets and risks.
• Facilitate the information security training and awareness programs and campaigns in coordination with IT and HR departments.
• Conduct information security internal audit at least once a year.
• Investigate and evaluate incident reports and monitor the effectiveness of corrective actions.
• Respond to audit questionnaires, risk assessments and other client assessments on information security.
• Monitor the firm’s compliance with the Data Privacy Act (DPA) of 2012.
• Design and implement programs/policies/activities to ensure compliance to the law (in coordination with lawyers handling DPA).
• Act as the firm’s point person on matters relating to the DPA.

Education

Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or related field

CISSP certification (preferred)

Job description

SyCip Salazar Hernandez & Gatmaitan seeks an Information Security and Data Protection Specialist to lead policy creation, governance and business continuity planning. You will formalize security controls, coordinate cross‑functional teams, and drive risk-based security programs across the firm.

The role requires a CS/IT degree and at least 3 years in information security management; CISSP preferred. You will conduct audits, handle data privacy compliance, and act as the DPA liaison with lawyers