IT & Security Leader | Data Protection Officer (DPO)

Compass Experience Labs; Manila; Hybrid; PHP 1,800,000 - 3,200,000; Full time

Job summary

Compass Experience Labs seeks an experienced IT & Information Security Manager / Data Protection Officer (DPO) to lead global IT operations, cybersecurity, and privacy compliance. This hybrid leadership role balances strategic oversight with hands-on execution, coordinating with external vCISO, auditors, and business stakeholders.

The DPO will own SOC 2 Type 2, implement privacy governance, and drive incident response, IAM, MFA, DLP, and cloud security controls across the enterprise.

Qualifications

• 5-7+ years of progressive IT/cybersecurity experience.
• Minimum 3 years in a leadership role.
• Hands-on experience with SOC 2 Type 2 audits.
• Experience working with external auditors, vCISO, MSSPs, or regulators.
• Privacy compliance experience (DPO) is highly preferred.

Responsibilities

• Define and drive IT strategy aligned with business objectives.
• Provide leadership to IT teams and manage budgets.
• Oversee IT operations, cloud services, and enterprise apps.
• Lead cybersecurity governance, risk management, and awareness programs.
• Own SOC 2 Type 2 program, audits, and remediation.
• Develop privacy policies, PIAs, and data sharing agreements.
• Coordinate governance, risk, and compliance (GRC) activities.

Skills

Identity & Access Management (IAM)

CrowdStrike

Vulnerability Management

Security Incident Response

ITIL

Disaster Recovery

SOC 2 Type 2

Data Privacy Act knowledge

Education

Bachelor's degree in Information Technology or related field

Tools

Jira Service Management

Job description

Compass Experience Labs seeks an experienced IT & Information Security Manager / Data Protection Officer (DPO) to lead global IT operations, cybersecurity, and privacy compliance. This hybrid leadership role balances strategic oversight with hands-on execution, coordinating with external vCISO, auditors, and business stakeholders.

The DPO will own SOC 2 Type 2, implement privacy governance, and drive incident response, IAM, MFA, DLP, and cloud security controls across the enterprise.