IT Governance and InfoSecurity Lead

SM Retail Inc; Philippines; On-site; PHP 2,000,000 - 3,500,000; Full time

Job summary

SM Retail Inc is seeking an IT Governance Lead to steer governance, risk, compliance, and vendor management. This senior role focuses on establishing frameworks, strengthening controls, and ensuring IT initiatives deliver measurable business outcomes.

You will oversee policy development, risk registers, audit remediation, and delivery governance across programs, with clear ownership, timelines, and success criteria.

Qualifications

• Bachelor’s degree or higher in IT/CS/Business or related field.
• 10–15+ years in IT governance or related leadership roles.
• Experience managing multi-vendor environments and governance reporting.
• Strong background in risk, audit remediation, and compliance tracking.
• Ability to review contracts and change requests from a risk perspective.

Responsibilities

• Lead IT governance policy development, standards, and procedures.
• Establish controls for change, release, incident, access, and data classification.
• Oversee risk registers, audit findings, and remediation actions.
• Partner with security teams on VAPT and governance initiatives.
• Oversee governance reviews of IT programs/projects with clear ownership and milestones.

Skills

IT governance

Risk management

Vendor management

IT operations

Program management

Change management

Communication

Presentation skills

Education

Bachelor's degree in Information Technology, Computer Science, Business Administration, or related field

Job description

Job Summary

The IT Governance Lead will lead our IT governance, risk, compliance, and vendor management functions. This is a strategic leadership role responsible for establishing governance frameworks, strengthening operational controls, managing technology risks, and ensuring that IT initiatives are delivered with accountability and measurable business outcomes.

What You'll Do

Lead IT Governance

• Develop, implement, and continuously improve IT governance policies, standards, and procedure
• Translate governance requirements into practical operational controls that promote compliance and consistency
• Establish standards for change management, release management, incident management, access management, and data classification
• Review policy exceptions, waivers, and governance issues, and elevate critical risks when necessary

Drive Risk, Security & Compliance

• Maintain enterprise RAID logs, risk registers, and governance trackers
• Monitor audit findings, cybersecurity remediation actions, and regulatory obligations through closure.
• Partner with the Information Security team on VAPT activities, remediation tracking, and security governance initiatives

Strengthen Program & Delivery Governance

• Oversee governance reviews for IT programs and projects to ensure clear ownership, realistic timelines, and measurable success criteria
• Establish RACI structures, acceptance criteria, and definitions of done for major initiatives
• Identify delivery risks, unresolved blockers, and aging action items, and drive timely escalation and resolution

What We're Looking For

• Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field
• At least 10-15+ years of experience in IT governance, IT program management, vendor management, IT operations, or technology delivery
• Proven experience managing complex multi-vendor environments and driving accountability for deliverables and business outcomes
• Strong background in risk management, audit remediation, compliance tracking, and governance reporting
• Experience reviewing contracts, SOWs, and change requests from an operational and commercial risk perspective
• Excellent stakeholder management, communication, and presentation skills
• Relevant certifications are an advantage: ITIL, PMP, COBIT, ISO 27001, or equivalent