IT Information Security Manager

Manila Water Philippine Ventures; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Manila Water Philippine Ventures is seeking a senior information security leader to design and implement enterprise security programs, covering cybersecurity and data privacy across the organization.

You will lead IT risk management, conduct regular assessments and audits, manage incidents, and ensure compliance with laws and regulations. Collaboration with business units and data protection officers is essential to protect assets and maintain trust.

Qualifications

• Bachelor's degree in IT or Computer Science is required.
• At least 5 years in IT management, information security, risk and compliance.
• Knowledge of SAP, Agile, and SCRUM is an advantage.
• Experience in Cybersecurity.

Responsibilities

• Lead design and implementation of enterprise information security programs.
• Manage IT risk management programs and ensure regulatory compliance.
• Perform vulnerability assessments and penetration testing.
• Act as incident manager for security incidents and breaches.
• Coordinate audits and compliance reviews with data protection officers.

Skills

IT management

Information security

Risk management

Compliance governance

Incident management

Vulnerability assessment

Penetration testing

Regulatory audits

Education

Bachelor's degree in IT / Computer Science

Tools

SAP

SCRUM

Agile tools

Job description

ROLE PURPOSE:

Leads the over-all design and implementation of information security programs by managing all risks related to information security, including cybersecurity, to prevent possible losses emanating from data breaches, whether analog or digital. Leads the over-all IT risk management programs and activities and ensures adherence of IT systems to all applicable laws and regulatory requirements to prevent possible losses emanating from non-compliance.

DELIVERABLES:

• Designs the information security architecture and drafts policies/procedures of the enterprise for approval
• Manage info-sec projects for the enterprise or specific to a business unit.
• Maintains Enterprise Data Privacy Compliance Management plan.
• Ensures it is updates and provide recommendations to improve the plan.
• Conduct regular assessment and gap analysis of existing IT systems, then identify areas for improvement and monitor action plans.
• Ensures delivery of these projects on-time and in scope. Manages team members and other resources.
• Assess info-sec technical solutions and provide recommendations.
• Reviews the info-sec related requirements of the projects and provide recommendations. Participates in the solutions delivery.
• Organize Info Sec steercom meetings. Present project status updates, seek approvals on drafted policies and procedures, etc.
• Project-manage the compliance initiatives across the enterprise through the business units’ respective Data Protection Officers.
• Perform vulnerability assessment and penetration tests of servers, networks or apps
• Acts as incident manager for info sec related incidents and breaches
• Perform compliance checks to info-sec related regulatory requirements. Provide recommendations.
• Implement info-sec awareness across the enterprise
• Ensure closure of info sec related risks and issues
• Implement and maintain technical and procedural controls to protect information flow across networks
• Information security policies
• Performs compliance audit and reviews of business units
• Launch/Execute DPA compliance awareness programs
• Maintains the group’s Risk Management assessment and mitigation initiatives. Ensures it is comprehensive and kept updated
• Execute risk awareness programs
• Ensures that the group complies with all regulatory compliance requirements. Monitor/review responsible units to comply accordingly
• Facilitates and assists in internal and external audit engagements. Ensures closure of audit findings
• Prepare, submit and monitor consolidated IT group's risk registry and compliance reports
• Maintain and update the IT Security compliance database
• Manages data storage and management to ensure data privacy is upheld
• Provides policies and guidelines on how to store and distribute data
• Assesses technical solutions related to data repository

EDUCATION / EXPERIENCE REQUIRED

• Bachelor's degree holder in IT, Computer Science
• At least 5 years experience in IT Management or in information security, risk and compliance
• Knowledge in SAP, Agile, SCRUM and related applications is an advantage
• Experience in Cybersecurity