ISMS & Audit Leader - GRC & Compliance Expert

Philippine Long Distance; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Philippine Long Distance Telephone Company (PLDT) seeks an ISMS and Audit Executive to lead information security compliance, auditing, and governance. The role focuses on ISMS, regulatory alignment, and collaboration with internal and external audit partners to strengthen security posture.

The position requires leadership in enterprise-wide audits, incident remediation oversight, and the continuous improvement of controls and frameworks across the organization.

Qualifications

• Leads with strong leadership in IT and cybersecurity, focusing on ISMS and audit practices.
• Experience with GRC and regulatory standards across frameworks like ISO/IEC 27001 and NIST CSF.
• Demonstrates cross-functional collaboration to raise security maturity and regulatory alignment.

Responsibilities

• Leads enterprise-wide information security compliance strategy for regulatory alignment and audit readiness.
• Manages a team of compliance auditors and oversees audit governance and execution.
• Develops and implements audit programs, closes compliance gaps with internal and external partners.
• Ensures remediation plans are comprehensive, actionable, and timely.
• Engages stakeholders to drive closure of compliance gaps within the CSOG.
• Validates security controls and tracks remediation of process gaps against best practices.
• Leads regular audits across the PLDT Group to assess compliance with CISP and CSF.

Skills

IT leadership

Cybersecurity

ISMS

GRC

Regulatory standards

Education

Bachelor’s degree in IT/CS/Engineering/Accounting

Job description

Philippine Long Distance Telephone Company (PLDT) seeks an ISMS and Audit Executive to lead information security compliance, auditing, and governance. The role focuses on ISMS, regulatory alignment, and collaboration with internal and external audit partners to strengthen security posture.

The position requires leadership in enterprise-wide audits, incident remediation oversight, and the continuous improvement of controls and frameworks across the organization.