Manager, IT Risk & Compliance

Solaire Resort; Parañaque; Presencial; PHP 1.800.000 - 2.400.000; Jornada completa

Descripción de la vacante

Solaire Resort is seeking a Manager of IT Security & Compliance to lead security and compliance initiatives across the organization. You will drive audits, strengthen controls, and partner with IT, Legal, and DPO to align processes with standards.

You will govern policies, conduct regular IT system audits, and mentor the team while communicating complex security topics to leadership. This role requires hands-on expertise in frameworks like ISO 27001/NIST and in protecting data across on‑premise

Formación

• Minimum of 7 years of experience in IT Security and Compliance.
• Bachelor’s degree in Computer Science or a related IT discipline.
• Certified Ethical Hacker (CEH) with expertise in penetration testing tools, techniques, and methodologies.
• CompTIA Security+ with a strong foundation in network security and risk management principles.
• CompTIA Network+ with knowledge of network infrastructure, configuration, and troubleshooting.
• CCNA or CCNP Security certification with expertise in enterprise networking and security hardening.
• Certified Information Systems Auditor (CISA).
• Strong knowledge of information security methodologies.
• Working knowledge of security standards and frameworks, including ISO 27001, NIST, and other cybersecurity frameworks.
• Advanced expertise in Cyber Kill Chain and MITRE ATT&CK frameworks.
• Expertise in network security technologies, including firewalls, web proxies, routers, switches, and ACLs.
• Experience with enterprise security systems and implementation practices, including the Data Privacy Act (DPA).
• Familiarity with corporate and government security regulations, including the National Privacy Commission (NPC).
• Strong communication skills to effectively engage stakeholders and support teams.
• Proficiency in implementing and configuring network security devices and components.
• Strong analytical and problem-solving capabilities.
• Effective organizational skills to manage and prioritize workload.
• Ability to work independently and collaboratively within a team environment.
• Understanding of ITIL Service Delivery framework.
• Professional, with a strong commitment to service excellence and value delivery.

Responsabilidades

• Oversee IT security and compliance in alignment with internal policies, standards, processes, and procedures, including scheduled internal audits of systems, servers, networks, business applications, and IT services to maintain compliance.
• Collaborate with external auditors, third parties, and customers to facilitate audit requests and the collection of supporting evidence.
• Govern IT security policies, processes, and tools to effectively manage and sustain compliance and audit systems, including associated services.
• Design and conduct regular audits of IT systems to ensure secure operations and protection of data from internal and external threats.
• Provide subject matter expertise to support the implementation and enforcement of security compliance across IT systems.
• Establish clear communication and reporting mechanisms for security compliance across business units.
• Lead discussions with stakeholders to address compliance gaps and drive improvement initiatives.
• Engage across business units to enhance program effectiveness, increase visibility, and strengthen security compliance across on-premise and cloud IT infrastructure.
• Balance and prioritize multiple workstreams while addressing competing priorities.
• Assess organizational impact and align security initiatives with business requirements.
• Ensure application security procedures meet business requirements and protect information from unauthorized access, disclosure, modification, damage, or loss.
• Oversee the implementation of access controls to ensure systems and data are accessible only to authorized and trained users, including proper handling and destruction of sensitive information.
• Serve as a subject matter expert in security procedures and audit compliance.
• Provide leadership, guidance, and mentorship to less experienced team members.
• Demonstrate strong written and presentation skills in delivering security-related communications.

Conocimientos

IT security

Compliance

Audits

Leadership

Communication

Risk management

MITRE ATT&CK

Educación

Bachelor's degree in Computer Science or related IT

Certified Ethical Hacker (CEH)

CompTIA Security+

CompTIA Network+

CCNA or CCNP Security

Certified Information Systems Auditor (CISA)

Herramientas

Penetration testing tools

Security frameworks knowledge

DPA familiarity

Descripción del empleo

• State/Province NCR
• Country Philippines

Job Description

POSITION SUMMARY

The Manager of IT Security & Compliance serves as a technical leader responsible for delivering security and compliance solutions. This role drives continuous improvement in identifying, managing, monitoring, and communicating security compliance across the organization.

The position partners closely with various business units, including IT, Internal Audit, Legal, the Data Protection Office (DPO), and other functions to align on business processes, security standards, and compliance monitoring. Establishing strong relationships across all levels of leadership, enhancing organizational compliance, and providing cybersecurity expertise are critical to success in this role.

Key responsibilities include expanding, improving, overseeing, and governing security compliance policies, requirements, processes, and ongoing monitoring. The role requires a highly collaborative team player who can effectively communicate IT security controls and work cross-functionally to strengthen security and compliance within Solaire IT Operations.

JOB RESPONSIBILITIES

Oversee IT security and compliance in alignment with internal policies, standards, processes, and procedures, including scheduled internal audits of systems, servers, networks, business applications, and IT services to maintain compliance.

Collaborate with external auditors, third parties, and customers to facilitate audit requests and the collection of supporting evidence.

Govern IT security policies, processes, and tools to effectively manage and sustain compliance and audit systems, including associated services.

Design and conduct regular audits of IT systems to ensure secure operations and protection of data from internal and external threats.

Provide subject matter expertise to support the implementation and enforcement of security compliance across IT systems.

Establish clear communication and reporting mechanisms for security compliance across business units.

Lead discussions with stakeholders to address compliance gaps and drive improvement initiatives.

Engage across business units to enhance program effectiveness, increase visibility, and strengthen security compliance across on-premise and cloud IT infrastructure.

Balance and prioritize multiple workstreams while addressing competing priorities.

Assess organizational impact and align security initiatives with business requirements.

Ensure application security procedures meet business requirements and protect information from unauthorized access, disclosure, modification, damage, or loss.

Oversee the implementation of access controls to ensure systems and data are accessible only to authorized and trained users, including proper handling and destruction of sensitive information.

Serve as a subject matter expert in security procedures and audit compliance.

Provide leadership, guidance, and mentorship to less experienced team members.

Demonstrate strong written and presentation skills in delivering security-related communications.

Requirements

QUALIFICATIONS AND REQUIREMENTS

Minimum of 7 years of experience in IT Security and Compliance.

Bachelor’s degree in Computer Science or a related IT discipline.

Certified Ethical Hacker (CEH) with expertise in penetration testing tools, techniques, and methodologies.

CompTIA Security+ with a strong foundation in network security and risk management principles.

CompTIA Network+ with knowledge of network infrastructure, configuration, and troubleshooting.

CCNA or CCNP Security certification with expertise in enterprise networking and security hardening.

Certified Information Systems Auditor (CISA).

Strong knowledge of information security methodologies.

Working knowledge of security standards and frameworks, including ISO 27001, NIST, and other cybersecurity frameworks.

Advanced expertise in Cyber Kill Chain and MITRE ATT&CK frameworks.

Expertise in network security technologies, including firewalls, web proxies, routers, switches, and ACLs.

Experience with enterprise security systems and implementation practices, including the Data Privacy Act (DPA).

Familiarity with corporate and government security regulations, including the National Privacy Commission (NPC).

Strong communication skills to effectively engage stakeholders and support teams.

Proficiency in implementing and configuring network security devices and components.

Strong analytical and problem-solving capabilities.

Effective organizational skills to manage and prioritize workload.

Ability to work independently and collaboratively within a team environment.

Understanding of ITIL Service Delivery framework.

Professional, with a strong commitment to service excellence and value delivery.