InfoSec Policy & Data Protection Lead

SYCiP SECROU HERNANDEZ & GATMAITAN; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

SYCiP SECROU HERNANDEZ & GATMAITAN is seeking an Information Security Manager to establish and maintain security policies, coordinate programs, and ensure regulatory compliance, including DPA 2012. The role requires at least 3 years of security leadership experience and a CISSP preference.

The successful candidate will work with IT, HR and legal teams to train staff, review supplier SLAs, and oversee internal audits to strengthen the firm’s information security posture.

Qualifications

• Minimum 3 years of experience in information security management.
• CISSP certification is preferred.
• Graduate of Computer Science, Computer Engineering, Information Technology, or related field.

Responsibilities

• Establish, document, and maintain information security policies, processes, and procedures.
• Coordinate information security programs across teams and with suppliers.
• Coordinate review of SLAs related to information security.
• Coordinate with process owners to identify and update security assets and risks.
• Lead information security awareness and training programs with IT and HR.
• Conduct annual information security internal audits.
• Investigate incidents and monitor corrective actions.
• Respond to audit questionnaires and risk assessments.
• Monitor compliance with the Data Privacy Act (DPA) 2012.
• Act as DPA liaison and point person.

Skills

Information security management

Policy development

Risk assessment

Incident investigation

Training & awareness

Audit coordination

Education

Bachelor's degree in Computer Science/Engineering/Information Technology

CISSP certification preferred

Job description

SYCiP SECROU HERNANDEZ & GATMAITAN is seeking an Information Security Manager to establish and maintain security policies, coordinate programs, and ensure regulatory compliance, including DPA 2012. The role requires at least 3 years of security leadership experience and a CISSP preference.

The successful candidate will work with IT, HR and legal teams to train staff, review supplier SLAs, and oversee internal audits to strengthen the firm’s information security posture.