InfoSec Governance & Policy Leader

Metrobank; Taguig; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

Metrobank is seeking an experienced professional to oversee Security Governance Management. You will formulate security policies, monitor program progress and drive an annual awareness program to align with the bank's objectives.

The role requires strong governance, risk, and compliance expertise and collaboration across ISD teams. Ideal candidates have hands-on experience in policy development, risk assessments, regulatory requirements, and people leadership.

Qualifications

• Experienced and well versed in information security risk assessment and management.
• Experience in governance, risk management, compliance audits and policy framework.
• Extensive knowledge of information security governance frameworks and programs.
• Knowledge of bank processes, IT processes, access controls, data security and risk assessments.
• Strong attention to detail, analytical and problem-solving skills with learning agility.
• Preferably with IS security certifications such as CISM or CRISC.
• Knowledgeable on BSP, DPA, PCI-DSS and other regulatory requirements.
• People management, teamwork, and ability to lead security initiatives.

Responsibilities

• Formulates, recommends and reviews information security policies and procedures.
• Addresses policy gaps on physical, environmental, personnel security and business continuity.
• Establishes and implements an Information Security Advocacy, Awareness and Training Program.
• Analyzes awareness program results and identifies improvement areas.
• Liaises with Bank units on information security governance, risk and compliance.
• Acts as point of contact for ISD BSP related requirements.
• Monitors tactical plans and program accomplishments.
• Collaborates with ISD departments to close audit and compliance exceptions.
• Supports department head in delivering tasks and deliverables.
• Performs other IS-related duties as directed.

Skills

Risk assessment

Governance

Policy framework

Project management

Time management

Communication skills

Team leadership

Analytical thinking

Learning agility

Regulatory knowledge

Education

CISM or CRISC certification

Tools

MS Office

PowerPoint

Excel

Job description

Metrobank is seeking an experienced professional to oversee Security Governance Management. You will formulate security policies, monitor program progress and drive an annual awareness program to align with the bank's objectives.

The role requires strong governance, risk, and compliance expertise and collaboration across ISD teams. Ideal candidates have hands-on experience in policy development, risk assessments, regulatory requirements, and people leadership.