ISO 27001 ISMS & Data Privacy Lead

Zuellig Pharma; Parañaque; On-site; PHP 2,000,000 - 5,000,000; Full time

Benefits offered by this job

Inclusive work environment

Diversity and inclusion

Total Rewards program

Job summary

Zuellig Pharma is a leading healthcare solutions company in Asia, driving secure information security and data privacy practices across its markets. The Principal Engineer will design, implement, and manage the enterprise ISMS based on ISO 27001, serving as a central SME for security policies and risk assessments.

Responsibilities include developing security standards, performing risk assessments, guiding audits, and coordinating cross-functional security initiatives to safeguard information

Qualifications

• Bachelor's degree in MIS / Business / IT is required.
• IT Security Certifications such as ISO 27001, CISA are preferred.
• 5–8 years of professional experience in IT Security and Compliance.
• 3+ years of professional experience in Data Privacy and Compliance.
• Experience in working in a multinational company.
• Experience in performing ISO 27001 internal audits.

Responsibilities

• Lead design, implementation and management of ISO 27001 ISMS across the enterprise.
• Develop and maintain information security policies, standards and procedures aligned with ISO 27001 and NIST.
• Perform risk assessments and provide guidance to markets IT teams on data privacy and cybersecurity.
• Coordinate internal audit activities related to ISO 27001 ISMS.
• Act as an internal consultant on information security and data privacy protections.
• Provide periodic reporting on information security issues to IT management and committee.

Skills

Information Security

Data Privacy

Risk Assessment

Internal Audit

Policy Development

Cross-functional Collaboration

Education

Bachelor's degree in MIS / Business / IT

IT Security Certifications (e.g., ISO-27001, CISA)

Tools

GRC for SAP Systems

Job description

Zuellig Pharma is a leading healthcare solutions company in Asia, driving secure information security and data privacy practices across its markets. The Principal Engineer will design, implement, and manage the enterprise ISMS based on ISO 27001, serving as a central SME for security policies and risk assessments.

Responsibilities include developing security standards, performing risk assessments, guiding audits, and coordinating cross-functional security initiatives to safeguard information