IT Consultant Cybersecurity Governance

TASQ; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

TASQ in Metro Manila is seeking an experienced Information Security professional to lead ISMS governance and cybersecurity initiatives. The role focuses on defining, maintaining, and improving security rules, overseeing regulatory alignment, and performing risk assessments across the organization.

The ideal candidate has a strong background in IT security infrastructure, standards compliance, and stakeholder management, with proven ability to manage governance programs and drive improvements.

Qualifications

• Academic degree in a relevant field and security certifications are desirable.
• Several years of experience in Information Security Management Systems.
• Strong knowledge of IT infrastructure, cybersecurity standards (ISO27001, NIST, NIS2).

Responsibilities

• Define, maintain, and continuously improve ISMS rules, procedures, and processes.
• Take over lifecycle management of the Cybersecurity Rule Landscape.
• Manage and evolve the regulatory landscape as an efficient regulatory system for cybersecurity.
• Implement and execute rule adherence measurement processes.
• Execute cybersecurity assessments.
• Exert policy authority on cybersecurity topics.
• Assess and process security exceptions.
• Work with various data sources to identify cyber risks within the organization.
• Conduct cyber risk assessments and prioritize risks by potential impact.
• Further develop the IT Service framework for cyber risk management.
• Actively track cyber risks and evaluate mitigation effectiveness.
• Support management of the company's external security posture.

Skills

ISMS governance

Cybersecurity governance

Regulatory awareness

Risk assessment

Stakeholder management

English fluency

Education

Bachelor's degree in Information Security or related field

CISM or equivalent certification

Job description

Job Description

• Define, maintain, and continuously improverules, procedures, and processes in the ISMS considering internal and external requirements.
• Take over Lifecycle Management of Cybersecurity Rule Landscape
• Manageand evolvethe regulatory landscape as an efficient and effective regulatory system for cybersecurity
• Implement and execute rule adherence measurement processes
• ExecuteCybersecurity Assessments
• Exercisepolicy authority on the topic of cybersecurity
• Assessand processsecurity exceptions
• Work with various data sources and to identify cyber risks within the organization
• Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
• Further develop the IT Service framework for cyber risk management
• Activelytrackcyber risks, including evaluation of mitigation effectiveness
• Support the management of the company's external security posture

Qualifications

• Academic degree in a relevant field,equivalent Information Securitycertifications (e.g., CISM) are desired
• Several years experience in the field of Information Security Management Systems
• Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
• Fluency in English (written and spoken)
• Experience in IT, process management, and Cybersecurity Governance
• Strong analytical skills and experience in defining cybersecurity governance
• Project Management Skills
• Interpersonal and intercultural skills to work with different stakeholders