IT Consultant Cybersecurity Governance

Continental Industry; Taguig; On-site; PHP 1,500,000 - 2,500,000; Full time

Job summary

Continental Global Business Services Manila is seeking an experienced Information Security professional to help shape and evolve our ISMS. You will define, maintain, and improve cybersecurity rules and processes, manage lifecycle of the rule landscape, and drive alignment with ISO27001, NIST, and NIS2 across the organization.

The role also involves conducting cyber risk assessments, supporting external audits, and partnering with IT and business units to strengthen cybersecurity governance.

Qualifications

• Experience in Information Security Management Systems (ISMS).
• Knowledge of ISO27001, NIST, and NIS2.
• Fluency in English (written and spoken).
• Experience working with external audit teams and regulatory bodies.
• Strong analytical skills and governance capabilities.

Responsibilities

• Define, maintain, and continuously improve rules, procedures, and processes in the ISMS.
• Take over lifecycle management of the cybersecurity rule landscape.
• Manage and evolve the regulatory landscape for cybersecurity.
• Conduct cybersecurity assessments and risk prioritization.
• Track cyber risks and evaluate mitigation effectiveness.
• Support external security posture and regulatory alignment.

Skills

Analytical skills

Project management

Intercultural communication

Information security governance

English fluency

Education

Information Security degree or certifications

Job description

Company Description

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2022, Continental generated sales of €39.4 billion and currently employs around 200,000 people in 57 countries and markets.

Continental Global Business Services in Manila started in June 2012 as Veyance Technologies Inc. and was acquired by Continental AG in January 2015. In the same year, it legally changed the company name to Continental Global Business Services Manila Inc., reflecting its global presence as a full‑fledged subsidiary of the ContiTech Division in Continental AG.

GBS Manila is composed of five main work streams, structured to make processes centralized, standardized, and leveraged with technology supported by the IT group, Continental Business Systems & RPA Competence Center. It provides end‑to‑end, front‑to‑back services: customer service, order management, purchasing, invoice to payment, credit and collection, full finance activities, data management, and HR services including payroll, employee benefits and talent acquisition; all built to meet its customers’ needs.

Job Description

You really want to shape big things? Be part of ContiTech’s central Cybersecurity team where you have the chance to further develop our ISMS, including reporting landscape. In this role you will:

• Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements.
• Take over lifecycle management of the cybersecurity rule landscape.
• Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity.
• Implement and execute rule adherence measurement processes.
• Execute cybersecurity assessments.
• Exercise policy authority on the topic of cybersecurity.
• Assess and process security exceptions.
• Work with various data sources and identify cyber risks within the organization.
• Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization.
• Further develop the IT Service framework for cyber risk management.
• Actively track cyber risks, including evaluation of mitigation effectiveness.
• Support the management of ContiTech’s external security posture.

If the key words “Risk appetite”, ISMS, PDCA and ISO27001 are familiar to you and you have the strong belief that Information Security is a business enabler, we look forward to your application!

Qualifications

• Academic degree in a relevant field; equivalent Information Security certifications (e.g., CISM) desired.
• Several years of experience in Information Security Management Systems.
• Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2).
• Fluency in English (written and spoken).
• Experience in IT, process management, and cybersecurity governance.
• Strong analytical skills and experience in defining cybersecurity governance.
• Project management skills.
• Interpersonal and intercultural skills to work with different stakeholders.

Additional Information

• The job crosses multiple IT organizational levels, business unit’s within the division, and business functional areas.
• Good project management and organizational practices must be maintained.
• The role requires adaptation and quick design implementation.
• Out‑of‑the‑box thinking is required. Ability to communicate with multiple management levels is required.
• Experience with external audit teams is a big part of the job; comfort with dealing with regulatory differences and how to overcome those is needed.

Applications from severely handicapped people are welcome.