IT Information Security Manager (Banking and Finance)

John Clements Consultants, Inc.; Makati; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

John Clements Consultants, Inc. is seeking an experienced IT Information Security Manager in the Philippines (Metro Manila).

The role leads information security governance, risk management, and regulatory compliance to protect IT assets and align with enterprise risk practices. The incumbent will oversee governance programs, risk assessments, and SOC operations, ensuring security-by-design across projects and vendor relationships.

Qualifications

• Bachelor’s degree in IT, Information Security, IT Audit or related field.
• 10+ years of experience in information security and IT risk management.
• Experience in governance, compliance, and audit environments.

Responsibilities

• Develop and enforce information security policies, standards, and procedures.
• Establish governance aligned to ISO 27001 and NIST frameworks.
• Lead IT risk assessments and maintain the risk register.
• Ensure compliance with the Data Privacy Act and regulatory requirements.
• Oversee outsourced Security Operations Center (SOC).
• Define security requirements across infrastructure and applications.
• Review and approve systems and solutions from a security perspective.
• Promote security-by-design in IT projects and transformation initiatives.

Skills

Information security

Governance

Stakeholder engagement

Analytical mindset

Education

Bachelor’s degree in IT/InfoSec or related

10+ years IT security experience

Tools

SIEM

EDR

IAM

Firewalls

ISO 27001

NIST

Job description

OVERVIEW

The IT Information Security Manager is responsible for establishing, implementing, and maintaining the organization’s information security, cybersecurity, and IT risk management program.

This role is provided with:

• Independence of security oversight
• Stronger governance and audit alignment
• Clear segregation of duties between execution and control functions

The role ensures protection of IT information assets, regulatory compliance, and alignment with enterprise risk management practices.

JOB DESCRIPTION

Information Security Governance

• Develop and enforce information security policies, standards, and procedures.
• Establish governance aligned to ISO 27001 and NIST frameworks.
• Ensure alignment with the company’s compliance governance and IT/ISSC oversight.

IT Risk Management & Compliance

• Conduct IT risk assessments and maintain the risk register.
• Ensure compliance with the Data Privacy Act and regulatory requirements.
• Lead audit readiness, compliance reporting, and remediation.
• Provide independent IT risk reporting to IT/ISSC and management.

Cybersecurity Operations Oversight

• Oversee outsourced Security Operations Center (SOC).
• Manage vulnerability management, incident response, and monitoring.
• Ensure effective operation of security tools (SIEM, EDR, IAM, firewalls).

Security Architecture & Assurance

• Define security requirements across infrastructure and applications.
• Review and approve systems and solutions from a security perspective.
• Ensure “security-by-design” in IT projects and transformation initiatives.
• Security Awareness & Culture.
• Lead organization-wide cybersecurity awareness programs.
• Promote accountability for IT and information security across business units.
• Vendor Security & Third-Party Risk.
• Perform vendor security assessments and reviews.
• Ensure third-party compliance with security standards.
• Align IT vendor contracts with security requirements.
• Independence & Governance Alignment.
• Maintain independence from IT operations while collaborating closely.
• Escalate risks directly to IT/ISSC, Senior Management, and Audit when needed.
• Support governance maturity through structured IT risk management.

QUALIFICATIONS

Education & Experience

• Bachelor’s degree in IT, Information Security, IT Audit or related field.
• 10+ years of experience in information security and IT risk management.
• Experience in governance, compliance, and audit environments.

Technical Skills

Security and IT Audit

• Security tools (SIEM, EDR, IAM, firewall)
• Security frameworks (ISO 27001, NIST)
• Risk assessment, vulnerability management, incident response
• IT Audit

Leadership and Soft Skills

• Strong risk and analytical mindset.
• Governance and policy development expertise.
• Independence and integrity.
• Strong communication and stakeholder engagement.

Note:

Background in leasing, fleet management, or financial services industries is a strong advantage.