IT Security GRC Lead - Risk, Compliance & ISMS

Aboitiz Power Corporation (Power); Makati; On-site; PHP 1,200,000 - 1,600,000; Full time

Job summary

Aboitiz Power Corporation (Power) is seeking a Security GRC Supervisor (IT) in Makati City, Philippines. You will lead and assist the Head of Security GRC in planning, implementing, and overseeing IT security governance, risk, and compliance initiatives.

The role requires 5+ years in security governance, risk, and audit, with certifications like CISSP/CISA/CISM being a plus; OT experience is advantageous. You will work with AP Information Security to deliver results and drive compliant risk

Qualifications

• Bachelor’s Degree or 4-year related course; Master’s degree is an advantage.
• At least 5 years of experience in security governance, risk, compliance or audit.
• OT environments experience is a plus.
• Professional security certifications like CISSP, CISA, CISM preferred but not required; FAIR is a plus.
• Demonstrated security project management experience.

Responsibilities

• Lead and assist in planning, implementing, and overseeing Security Governance, Risk, and Compliance (GRC) for IT.
• Maintain ISMS and update Information Asset Registry.
• Review contracts for security clauses and drive compliance.
• Collaborate with AP Information Security to deliver results and develop skills.

Skills

IT security frameworks

Security risk management

Stakeholder management

Security risk assessments

Security compliance knowledge

Third-party risk management

Education

Bachelor's degree

Master’s degree

Security certifications advantage

Job description

Aboitiz Power Corporation (Power) is seeking a Security GRC Supervisor (IT) in Makati City, Philippines. You will lead and assist the Head of Security GRC in planning, implementing, and overseeing IT security governance, risk, and compliance initiatives.

The role requires 5+ years in security governance, risk, and audit, with certifications like CISSP/CISA/CISM being a plus; OT experience is advantageous. You will work with AP Information Security to deliver results and drive compliant risk