IT Security Manager - GRC & Incident Response

Peak Outsourcing; Pajo; On-site; PHP 1,800,000 - 2,900,000; Full time

Job summary

Peak Outsourcing in Cebu, Philippines seeks an IT Security Manager to lead the cybersecurity program across governance, risk, and compliance. You will design, implement, and continuously improve controls to protect digital assets and data, aligning with ISO 27001, SOC 2 Type II, PCI DSS, and NIST frameworks.

The ideal candidate has 8–12+ years in IT/security with at least 5 years in leadership, strong incident response, cloud security, and experience with SIEMs and vulnerability management.

Qualifications

• Bachelor’s degree in information technology or information security, Computer Science, or related field (Master’s preferred).
• 8–12+ years of IT/security experience, with at least 5 years in a leadership role.
• Proven experience implementing and managing ISO 27001 certification programs, SOC 2 Type II audits, PCI DSS, and NIST frameworks.
• Deep understanding of cybersecurity domains: network security, endpoint protection, application security, threat detection and incident response, digital forensics, and risk mitigation.
• Hands-on experience with security tools: SIEM (Splunk, Sentinel, QRadar), EDR/XDR (CrowdStrike, Defender), vulnerability scanners (Qualys, Tenable, Rapid7).

Responsibilities

• Lead security strategy across governance, risk, and compliance (GRC) and technical security operations.
• Design, implement, and continuously improve a comprehensive cybersecurity program.
• Ensure alignment with ISO 27001, SOC 2 Type II, PCI DSS, and NIST frameworks; manage regulatory requirements.
• Drive security awareness and risk-based decision making across the organization.

Skills

Cybersecurity leadership

GRC governance

Incident response

Risk assessment

Cloud security

Education

Bachelor's degree in IT/InfoSec

Master’s preferred

Tools

SIEM tools

EDR/XDR

Vulnerability scanners

Job description

Peak Outsourcing in Cebu, Philippines seeks an IT Security Manager to lead the cybersecurity program across governance, risk, and compliance. You will design, implement, and continuously improve controls to protect digital assets and data, aligning with ISO 27001, SOC 2 Type II, PCI DSS, and NIST frameworks.

The ideal candidate has 8–12+ years in IT/security with at least 5 years in leadership, strong incident response, cloud security, and experience with SIEMs and vulnerability management.