Principal ISO 27001 InfoSec & Data Privacy Engineer

Zuellig Pharma; Parañaque; On-site; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Flexible work-life balance

Total Rewards

Inclusive culture

Job summary

Zuellig Pharma is seeking a Principal Engineer for Information & Data Privacy to lead ISO 27001 ISMS design, implementation and management across markets. You will develop security and privacy policies, conduct risk assessments, and ensure regulatory compliance in a multinational setting.

You will drive security awareness, coordinate audits, and provide expert guidance to IT, HR, legal, and business units to safeguard information assets and ensure secure healthcare access across Asia.

Qualifications

• Bachelor's degree in MIS/Business/IT or related field.
• IT security certifications such as ISO-LA, CISA preferred.
• 5–8 years in IT Security and Compliance.
• 3+ years in Data Privacy and Compliance.
• Experience in multinational environments.

Responsibilities

• Design, implement, and maintain ISO 27001 ISMS across ZP enterprise.
• Develop policies, standards, and procedures aligned with ISO27001 and NIST.
• Perform risk assessments and guide Markets IT Heads/Managers in such analyses.
• Support internal audit activities and ISO 27001 ISMS compliance.
• Coordinate with HR, legal, finance, and executive offices.
• Promote information security awareness and privacy programs.
• Report security issues to IT management and Steering Committee.

Skills

IT Security

Data Privacy

Risk Assessment

Internal Audit

Policy development

Stakeholder collaboration

Education

Bachelor's degree in MIS / Business / IT

Tools

SAP GRC

MS Office

Intune MDM

Job description

Zuellig Pharma is seeking a Principal Engineer for Information & Data Privacy to lead ISO 27001 ISMS design, implementation and management across markets. You will develop security and privacy policies, conduct risk assessments, and ensure regulatory compliance in a multinational setting.

You will drive security awareness, coordinate audits, and provide expert guidance to IT, HR, legal, and business units to safeguard information assets and ensure secure healthcare access across Asia.