Isms And Audit Executive

Philippine Long Distance; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Philippine Long Distance Telephone Company (PLDT) seeks an ISMS and Audit Executive to lead information security compliance, auditing, and governance. The role focuses on ISMS, regulatory alignment, and collaboration with internal and external audit partners to strengthen security posture.

The position requires leadership in enterprise-wide audits, incident remediation oversight, and the continuous improvement of controls and frameworks across the organization.

Qualifications

• Leads with strong leadership in IT and cybersecurity, focusing on ISMS and audit practices.
• Experience with GRC and regulatory standards across frameworks like ISO/IEC 27001 and NIST CSF.
• Demonstrates cross-functional collaboration to raise security maturity and regulatory alignment.

Responsibilities

• Leads enterprise-wide information security compliance strategy for regulatory alignment and audit readiness.
• Manages a team of compliance auditors and oversees audit governance and execution.
• Develops and implements audit programs, closes compliance gaps with internal and external partners.
• Ensures remediation plans are comprehensive, actionable, and timely.
• Engages stakeholders to drive closure of compliance gaps within the CSOG.
• Validates security controls and tracks remediation of process gaps against best practices.
• Leads regular audits across the PLDT Group to assess compliance with CISP and CSF.

Skills

IT leadership

Cybersecurity

ISMS

GRC

Regulatory standards

Education

Bachelor’s degree in IT/CS/Engineering/Accounting

Job description

ISMS and Audit Executive

Company : Philippine Long Distance
Job Type : Full Time
Location : Philippines

Job Description - ISMS and Audit Executive

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, Accountancy, or any related course/discipline.

Qualifications

• Over 5 years of strong leadership in IT and cybersecurity, specializing in Information Security Management Systems (ISMS), audit practices, Governance, Risk, and Compliance (GRC), as well as regulatory, industry and international standards.
• Demonstrates a proven track record in leading enterprise-wide security audits and contributing to the management of compliance programs aligned with cybersecurity frameworks such as ISO/IEC 27001 and the NIST Cybersecurity Framework (CSF).
• Exhibits strong capability in cross-functional collaboration, enhancing security control maturity, and maintaining alignment with evolving regulatory and industry standards.

Duties and Responsibilities

Leads the enterprise-wide information security compliance strategy to ensure regulatory alignment, audit readiness, and continuous control improvement. Manages and supervises a team of compliance auditors, providing guidance and mentorship while overseeing audit governance and execution. Drives the development and implementation of audit programs and closure of compliance gaps, in collaboration with internal and external audit partners. Ensures compliance efforts align with industry standards and evolving regulatory requirements, while proactively monitoring developments to strengthen the organization’s security posture and governance maturity.

Audit Issue Management and Resolution

Oversees audit-related activities, ensuring timely and complete resolution of all audit findings. Coordinates with relevant stakeholders to implement sustainable remediation plans that address root causes and prevent recurrence.

Remediation Oversight and Timeline Management

Ensures that all remediation plans are comprehensive, actionable, and executed within agreed timelines. Monitors progress and escalates risks to timely closure, reinforcing accountability and governance discipline.

Stakeholder Engagement and Compliance Closure

Partners with internal and external audit teams to drive the closure of compliance gaps of the Cyber Security Operations Group (CSOG). Facilitates cross-functional collaboration to ensure audit recommendations are fully addressed and compliance maturity is continuously improved.

Security Control Validation and Gap Management

Conducts independent validation of cybersecurity control process. Identifies and tracks remediation of process gaps, ensuring that corrective actions are effectively implemented and aligned with industry best practices.

Information Security Compliance Auditing

Leads the execution of regular audits across the PLDT Group to assess compliance with the Corporate Information Security Policy (CISP) and other security controls, including but not limited to ISO/IEC 27001 and the NIST Cybersecurity Framework (CSF).

Regulatory Intelligence and Best Practices

Monitors evolving regulatory requirements and industry best practices to proactively enhance the organization’s compliance posture. Ensures continuous improvement of audit methodologies and control frameworks.

Tool Management and Delivery

Leads the deployment, integration, and continuous enhancement of compliance tools that enforce security policies and support regulatory adherence through effective utilization, governance, and audit-aligned capabilities.

Project Management

Ensures timely and high-quality delivery of technical assessments for key information security initiatives, in collaboration with the Capability and Delivery team.

People Management

Provides timely, constructive feedback on staff and supervisor performance. Acts as a mentor and role model, fostering growth and development. Ensures the creation and execution of effective succession plans to build future leadership.

Operational Support

Provide leadership and support for additional duties and responsibilities as assigned, ensuring alignment with organizational priorities and operational excellence.

About the Company

Philippine Long Distance

Philippine Long Distance Telephone Company (PLDT) is the leading telecommunications provider in the Philippines with approximately 41 wireless subscribers and nearly 2 million fixed lines. PLDT offers primarily prepaid mobile services under the Smart, Talk 'N Text, and CURE brands; it also offers mo...