ISMS & Compliance Leader — Security & Audit

Innodata Inc.; Philippines; On-site; PHP 2,000,000 - 3,200,000; Full time

Job summary

Innodata Inc. is seeking an experienced Information Security Engineer to protect information assets through proactive monitoring, incident response, vulnerability management, and cybersecurity controls.

You will lead ISMS policy management, coordinate initiatives, and ensure ISO 27001:2022 compliance across the organization, with annual management reviews and strong cross-functional collaboration. A security-first culture will be built through training and audits.

Qualifications

• Bachelor's degree required with 10 years of progressive experience in internal audit, risk management, or compliance.
• 10+ years in internal audit/risk/compliance with 3–5 years in leadership.
• Strong communication and ability to present complex findings to senior stakeholders.

Responsibilities

• Manage and lead Innodata's ISMS policy, procedure, and records review and documentation.
• Coordinate all ISMS initiatives for the organization.
• Help ensure organizational compliance with ISMS policies and ISO 27001:2022 standard requirements.
• Ensure ongoing ISMS updates/initiatives are presented to management on an annual basis.
• Coordinate and manage internal audits, management reviews, and execution of corrective/preventive actions.
• Track and facilitate closure of observations, gaps, and non-conformities identified during audits.

Skills

Leadership

Audit management

Stakeholder management

Communication

Cross-functional teamwork

Data analysis

Security awareness

Education

Bachelor's degree in Accountancy, Finance, Business Administration, or related field

Tools

Windows AD

O365

SASE

WAF

Firewall

IAM and IGA

MFA

RSA Archer

Cloud security (AWS/Azure/GCP/OCI)

Job description

Innodata Inc. is seeking an experienced Information Security Engineer to protect information assets through proactive monitoring, incident response, vulnerability management, and cybersecurity controls.

You will lead ISMS policy management, coordinate initiatives, and ensure ISO 27001:2022 compliance across the organization, with annual management reviews and strong cross-functional collaboration. A security-first culture will be built through training and audits.