Security Governance Lead: Policy, Risk & Awareness

Metrobank; Philippines; Hybrid; PHP 900,000 - 1,800,000; Full time

Job summary

Metrobank in the Philippines is seeking a Security Governance Management professional to formulate and promote information security policies and procedures. You will monitor security plans, guide awareness programs, and coordinate with other units to ensure compliance and effective risk management.

The role emphasizes strong governance, regulatory knowledge (BSP, DPA, PCI-DSS), and hands-on leadership to advance bank information security across the organization.

Qualifications

• Experienced in information security risk assessment and management.
• Knowledge of governance frameworks and security programs.
• Understanding bank processes, IT controls, and data security.
• Strong analytical and problem-solving skills with learning agility.
• IS security certification such as CISM or CRISC preferred.
• Familiar with BSP, DPA, PCI-DSS and other compliance requirements.
• People management and teamwork skills; able to lead security initiatives.

Responsibilities

• Formulates, recommends and reviews information security policies and procedures.
• Addresses policy gaps on physical, environmental, personnel security, business continuity and secure development lifecycle.
• Establishes and implements an Information Security Advocacy, Awareness and Training Program.
• Analyzes results of the Awareness program to measure effectiveness.
• Liaises with bank units on security governance, risk and compliance duties.
• Point of contact for ISD BSP related requirements and compliance.
• Monitors accomplishment of tactical plans and programs.
• Works with ISD departments to close audit and compliance exceptions.
• Supports Department Head in managing tasks and deliverables.
• Performs other information security related duties as directed.

Skills

Information Security

Risk Assessment

Governance

Compliance

Leadership

MS Office

Tools

Policy Frameworks

Job description

Metrobank in the Philippines is seeking a Security Governance Management professional to formulate and promote information security policies and procedures. You will monitor security plans, guide awareness programs, and coordinate with other units to ensure compliance and effective risk management.

The role emphasizes strong governance, regulatory knowledge (BSP, DPA, PCI-DSS), and hands-on leadership to advance bank information security across the organization.