IT Consultant Cybersecurity Governance

Tasq Work; Makati; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Tasq Work is looking for a capable Information Security Manager to lead the ISMS governance, risk management, and regulatory compliance programs in the Metro Manila area. The role focuses on defining and maintaining security policies, controls, and processes across the organization.

You will oversee lifecycle management of cybersecurity rules, perform risk assessments, and coordinate with stakeholders to strengthen the company's external security posture in a dynamic environment.

Qualifications

• Academic degree in a relevant field; certifications such as CISM are preferred.
• Several years of experience in Information Security Management Systems.
• Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (ISO27001, NIST, NIS2).
• Fluency in English (written and spoken).
• Experience in IT, process management, and Cybersecurity Governance.
• Strong analytical skills and experience in defining cybersecurity governance.
• Project Management Skills.
• Interpersonal and intercultural skills to work with different stakeholders.

Responsibilities

• Define, maintain, and improve ISMS rules, procedures, and processes.
• Take over Lifecycle Management of Cybersecurity Rule Landscape.
• Evolve regulatory landscape as an efficient regulatory system for cybersecurity.
• Implement and execute rule adherence measurement processes.
• Execute Cybersecurity Assessments.
• Exercisepolicy authority on cybersecurity topics.
• Assess and process security exceptions.
• Collaborate with data sources to identify cyber risks.
• Conduct cyber risk assessments and prioritize risks by impact.
• Develop the IT Service framework for cyber risk management.
• Track cyber risks and evaluate mitigation effectiveness.
• Support the management of the company's external security posture.

Skills

Information Security Governance

ISO27001 Knowledge

NIST/NIS2 Knowledge

CISM Certification

Regulatory Compliance

Risk Assessment

Project Management

Stakeholder Management

Fluent English

Education

Bachelor's degree in IT / Security

CISM or equivalent certification

Tools

ISO27001

NIST Framework

Cybersecurity Governance

Job description

Job Description

• Define, maintain, and continuously improverules, procedures, and processes in the ISMS considering internal and external requirements.
• Take over Lifecycle Management of Cybersecurity Rule Landscape
• Manageand evolvethe regulatory landscape as an efficient and effective regulatory system for cybersecurity
• Implement and execute rule adherence measurement processes
• ExecuteCybersecurity Assessments
• Exercisepolicy authority on the topic of cybersecurity
• Assessand processsecurity exceptions
• Work with various data sources and to identify cyber risks within the organization
• Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
• Further develop the IT Service framework for cyber risk management
• Activelytrackcyber risks, including evaluation of mitigation effectiveness
• Support the management of the company's external security posture

Qualifications

• Academic degree in a relevant field,equivalent Information Securitycertifications (e.g., CISM) are desired
• Several years experience in the field of Information Security Management Systems
• Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
• Fluency in English (written and spoken)
• Experience in IT, process management, and Cybersecurity Governance
• Strong analytical skills and experience in defining cybersecurity governance
• Project Management Skills
• Interpersonal and intercultural skills to work with different stakeholders