SECURITY GOVERNANCE MANAGEMENT

Metrobank; Philippines; Hybrid; PHP 900,000 - 1,800,000; Full time

Job summary

Metrobank in the Philippines is seeking a Security Governance Management professional to formulate and promote information security policies and procedures. You will monitor security plans, guide awareness programs, and coordinate with other units to ensure compliance and effective risk management.

The role emphasizes strong governance, regulatory knowledge (BSP, DPA, PCI-DSS), and hands-on leadership to advance bank information security across the organization.

Qualifications

• Experienced in information security risk assessment and management.
• Knowledge of governance frameworks and security programs.
• Understanding bank processes, IT controls, and data security.
• Strong analytical and problem-solving skills with learning agility.
• IS security certification such as CISM or CRISC preferred.
• Familiar with BSP, DPA, PCI-DSS and other compliance requirements.
• People management and teamwork skills; able to lead security initiatives.

Responsibilities

• Formulates, recommends and reviews information security policies and procedures.
• Addresses policy gaps on physical, environmental, personnel security, business continuity and secure development lifecycle.
• Establishes and implements an Information Security Advocacy, Awareness and Training Program.
• Analyzes results of the Awareness program to measure effectiveness.
• Liaises with bank units on security governance, risk and compliance duties.
• Point of contact for ISD BSP related requirements and compliance.
• Monitors accomplishment of tactical plans and programs.
• Works with ISD departments to close audit and compliance exceptions.
• Supports Department Head in managing tasks and deliverables.
• Performs other information security related duties as directed.

Skills

Information Security

Risk Assessment

Governance

Compliance

Leadership

MS Office

Tools

Policy Frameworks

Job description

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Position Title: Security Governanace Management

Job Summary:

Formulate and recommend information security policies and procedures to meet the bank’s information security objectives and ensure effective implementation. Monitor the accomplishments of the plans and programs of the Division. Plan and execute the annual security awareness program.

Specific Duties & Responsibilities:

• Formulates, recommends and reviews information security policies and procedures to meet the bank’s information security objectives.
• Addresses information security policy gaps on physical, environmental, personnel security, business continuity and secure application development lifecycle management.
• Establishes and implements an Information Security Advocacy, Awareness and Training Program to include the latest information security threats, issues, best practices, methodologies, standards and advisories. Prepares content for publishing/release.
• Analyzes results of the Awareness program to determine success rate, improvements in the program and where employees need information security knowledge reinforcements.
• Liaises with other units of the Bank on their information security governance, risk and compliance related duties, responsibilities and practices.
• Point of contact for ISD BSP related requirements and compliance requirements.
• Monitors accomplishment of tactical plans and programs.
• Works with other ISD Departments to ensure closure of audit and compliance exceptions
• Proactively works with the Department Head in managing accomplishment of tasks and deliverables.
• Performs other information security related duties and responsibilities as directed by the Department Head.

Qualification

• Experienced and well versed in information security risk assessment and management
• Has experience in information security governance, risk management, Compliance Audit and Policy Framework, Metrics Measurement, Awareness, Training, and Advocacy
• Extensive knowledge in various information security governance frameworks, and experiencing managing information security strategies and programs
• Has working knowledge, understanding and experience in bank processes, IT processes, access controls, data security, controls assurance, controls and risk assessments.
• Strong attention to detail, analytical, and problem-solving skills; strong learning agility with the abilityto learn new processes.
• Preferably with IS security related certification such as CISM, CRISC.
• Knowledgeable on various compliance and regulatory requirements (i.e., BSP, DPA, PCI-DSS, etc.)
• People Management Skills: Ability to lead and work well with the team, internal, and external clients. Have good teamwork and collaboration skills: good team players with the ability to lead security initiatives.
• Good Project management skills: to lead and manage accomplishments of assigned tasks.
• Possess excellent time management skills, thrive in a fast paced demanding environment
• Be a self-managed, self-starter with good organizational skills to include good follow-up skills
• Be able to work under pressure on multiple tasks/projects simultaneously.
• Good written and verbal communication skills: to effectively articulate and explain complex security topics in simple language, concise and easy to understand concepts.
• Knowledge in using MS office tools such as PowerPoint, word, excel and project