IT Manager (InfoSec)

Sprout Solutions; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

A growing tech firm in the Philippines is seeking an experienced IT Manager for Information Security to lead the implementation of the information security program. The role requires at least 5–7 years of IT experience with a strong focus on securing networks and systems. The ideal candidate will have relevant certifications and excellent communication and leadership skills.

Qualifications

• 5–7 years of experience in IT with a focus on information security.
• Industry certifications preferred: CISSP, CISM, CEH, CompTIA Security+.
• Strong knowledge of encryption technologies and data loss prevention tools.

Responsibilities

• Develop and implement information security policies, procedures, and controls.
• Manage risk assessments and vulnerability scans to identify security threats.
• Lead the response to security incidents and conduct investigations.

Skills

Knowledge of network and system security

Analytical skills

Communication skills

Leadership skills

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity

Tools

SIEM

Endpoint protection

Cloud security solutions

Job description

Sure! Here's a job description for an IT Manager (Information Security) tailored for a corporate setting:

Job Title: IT Manager – Information Security (InfoSec)

Department: Information Technology
Reports to: Head of IT / CIO
Location: [Insert Location]
Employment Type: Full-time

Job Summary:

We are seeking an experienced and proactive IT Manager – Information Security to lead the design, implementation, and management of our organization’s information security program. The role ensures that data, systems, and networks are protected from internal and external threats while maintaining compliance with applicable regulations and industry best practices.

Key Responsibilities:

Develop and implement comprehensive information security policies, procedures, and controls.

Manage risk assessments and vulnerability scans to identify and address security threats.

Lead the response to security incidents, including investigation, root cause analysis, and remediation.

Oversee the implementation and monitoring of security tools (e.g., firewalls, intrusion detection systems, endpoint protection).

Conduct security awareness training for employees and stakeholders.

Ensure compliance with applicable frameworks and standards (e.g., ISO 27001, NIST, GDPR, Data Privacy Act).

Collaborate with IT, legal, HR, and third-party vendors to address security risks and projects.

Maintain and update business continuity and disaster recovery plans.

Prepare and present regular security reports and updates to leadership.

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

At least 5–7 years of experience in IT, with a focus on information security.

Industry certifications preferred (e.g., CISSP, CISM, CEH, CompTIA Security+).

Strong knowledge of network and system security, encryption technologies, and data loss prevention tools.

Experience managing SIEM, endpoint protection, and cloud security solutions.

Solid understanding of regulatory requirements and compliance standards.

Excellent analytical, communication, and leadership skills.

Nice to Have:

Experience with cloud platforms (AWS, Azure, Google Cloud) and securing hybrid environments.

Familiarity with DevSecOps and secure software development practices.

Background in managing IT audits and third-party risk assessments.

Let me know if you want this customized for a specific industry (e.g., fintech, healthcare, BPO).