IT Consultant Cybersecurity Governance ISMS

Continental; Manila; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Continental Global Business Services Manila Inc. in Manila is seeking a seasoned Information Security professional to shape and manage our ISMS. You will define and refine security rules, oversee lifecycle management, and drive ongoing regulatory compliance across the organization.

The role requires strong governance, 프로젝트 management, and cross-functional collaboration to protect data and systems while supporting business agility and external audits.

Qualifications

• Academic background in IT or security fields.
• CISM or equivalent security certification is desirable.
• Several years of ISMS experience.
• Fluency in English, written and spoken.

Responsibilities

• Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements.
• Take over Lifecycle Management of Cybersecurity Rule Landscape
• Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity
• Implement and execute rule adherence measurement processes
• Execute Cybersecurity Assessments
• Exercise policy authority on the topic of cybersecurity
• Assess and process security exceptions
• Work with various data sources and to identify cyber risks within the organization
• Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
• Further develop the IT Service framework for cyber risk management
• Actively track cyber risks, including evaluation of mitigation effectiveness
• Support the management of ContiTechs external security posture

Skills

English fluency

Cybersecurity governance

Analytical skills

Project management

Interpersonal & intercultural skills

Education

Academic degree in a relevant field

CISM certification

Job description

Job Description:

Company Description

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2022, Continental generated sales of €39.4 billion and currently employs around 200,000 people in 57 countries and markets.

Continental Global Business Services in Manilastarted in June 2012 asVeyance Technologies Inc. and was acquired by Continental AG in January 2015. On the same year, it legally changed the company name toContinental Global Business Services Manila Inc., which reflects its global presence as a full-fledged subsidiary of ContiTech Division in Continental AG.

GBS Manila is composed of five (5) main work streams, structured to make processes centralized, standardized, and in leveraged technology with the support of IT group, Continental Business Systems & RPA Competence Center.

It provides end-to-end, front-to-back services; from customer service, order management, purchasing, invoice to payment, credit and collection, full finance activities, data management, and HR services including payroll, employee benefits and talent acquisition; all built to meet its customers needs.

Job Description

You really want to shape big things? Here you are – be part of ContiTechs central Cybersecurity team where you have the chance to further develop our ISMS incl. reporting landscape. In this role you

• Define, maintain, and continuously improverules, procedures, and processes in the ISMS considering internal and external requirements.
• Take over Lifecycle Management of Cybersecurity Rule Landscape
• Manageand evolvethe regulatory landscape as an efficient and effective regulatory system for cybersecurity
• Implement and execute rule adherence measurement processes
• ExecuteCybersecurity Assessments
• Exercisepolicy authority on the topic of cybersecurity
• Assessand processsecurity exceptions
• Work with various data sources and to identify cyber risks within the organization
• Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
• Further develop the IT Service framework for cyber risk management
• Activelytrackcyber risks, including evaluation of mitigation effectiveness
• Support the management of ContiTechs external security posture

If the key words Risk appetite, ISMS, PDCA and ISO27001 are familiar to you and you have the strong belief that Information Security is a business enabler, we look forward to your application!

Qualifications

• Academic degree in a relevant field,equivalent Information Securitycertifications (e.g., CISM) are desired
• Several years experience in the field of Information Security Management Systems
• Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
• Fluency in English (written and spoken)
• Experience in IT, process management, and Cybersecurity Governance
• Strong analytical skills and experience in defining cybersecurity governance
• Project Management Skills
• Interpersonal and intercultural skills to work with different stakeholders

Applications from severely handicapped people are welcome.

Additional Information

Most of the time the job crosses multiple IT organizational levels, BU's within the division, and business functional areas.

It is important that good project management and organizational practices are maintained.

The job requires the need to adapt and come up with quick designs to implement.

Out of the box thinking is required. Ability to communicate with multiple management levels is required.

Experience with external audit teams is a big part of the job,so comfort with dealing with regulatory differences and how to overcome those is needed.

• Leadership Level: Leading Self
• Legal Entity: Continental Global Business Services Manila, Inc. (2008)
• Working Time: Full Time

Requirements: