ISMS & Cybersecurity Governance Lead

Continental Industry; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Continental Global Business Services Manila Inc. in Manila, Philippines, seeks a seasoned Information Security professional to help shape our ISMS and reporting landscape within ContiTech's central Cybersecurity team.

You will define and improve rules, manage regulatory landscape, execute assessments, and collaborate with data sources to identify cyber risks across the organization.

The role requires English fluency, project management experience, and a strong background in IT security governance.

Qualifications

• Academic degree in a relevant field.
• CISM or equivalent certification desirable.
• Several years of experience in Information Security Management Systems.
• Fluency in English (written and spoken).
• Experience in IT, process management, and cybersecurity governance.
• Strong analytical and governance skills.

Responsibilities

• Define, maintain, and improve ISMS rules and processes considering internal and external requirements.
• Lifecycle management of cybersecurity rule landscape.
• Manage and evolve regulatory landscape for cybersecurity.
• Implement and execute rule adherence measurement processes.
• Execute cybersecurity assessments.
• Exercise policy authority on cybersecurity topics.
• Assess and process security exceptions.
• Identify cyber risks from data sources and prioritize them.
• Develop IT service framework for cyber risk management.
• Actively track cyber risks and evaluate mitigation effectiveness.
• Support ContiTech's external security posture.

Skills

Fluency in English

Analytical skills

Interpersonal & intercultural skills

Project management

Education

Academic degree in Information Security

CISM or equivalent certification

Job description

Continental Global Business Services Manila Inc. in Manila, Philippines, seeks a seasoned Information Security professional to help shape our ISMS and reporting landscape within ContiTech's central Cybersecurity team.

You will define and improve rules, manage regulatory landscape, execute assessments, and collaborate with data sources to identify cyber risks across the organization.

The role requires English fluency, project management experience, and a strong background in IT security governance.