Security GRC Supervisor

Aboitiz Power Corporation (Power); Makati; On-site; PHP 1,200,000 - 1,600,000; Full time

Job summary

Aboitiz Power Corporation (Power) is seeking a Security GRC Supervisor (IT) in Makati City, Philippines. You will lead and assist the Head of Security GRC in planning, implementing, and overseeing IT security governance, risk, and compliance initiatives.

The role requires 5+ years in security governance, risk, and audit, with certifications like CISSP/CISA/CISM being a plus; OT experience is advantageous. You will work with AP Information Security to deliver results and drive compliant risk

Qualifications

• Bachelor’s Degree or 4-year related course; Master’s degree is an advantage.
• At least 5 years of experience in security governance, risk, compliance or audit.
• OT environments experience is a plus.
• Professional security certifications like CISSP, CISA, CISM preferred but not required; FAIR is a plus.
• Demonstrated security project management experience.

Responsibilities

• Lead and assist in planning, implementing, and overseeing Security Governance, Risk, and Compliance (GRC) for IT.
• Maintain ISMS and update Information Asset Registry.
• Review contracts for security clauses and drive compliance.
• Collaborate with AP Information Security to deliver results and develop skills.

Skills

IT security frameworks

Security risk management

Stakeholder management

Security risk assessments

Security compliance knowledge

Third-party risk management

Education

Bachelor's degree

Master’s degree

Security certifications advantage

Job description

Security GRC Supervisor (IT)

Location: Makati City, Philippines

Job Level: Supervisory

Business Unit: APC

Power your future with AboitizPower.

As Security GRC Supervisor (IT), you will lead and assist the Head of Security GRC in planning, implementing, and overseeing Security Governance, Risk, and Compliance (GRC) areas for IT. This includes ensuring maintenance of the Information Security Management System (ISMS), updating the Information Asset Registry, reviewing contracts for security clauses, conducting comprehensive risk assessments, and driving compliance efforts. You will work closely with AP Information Security to deliver results, create positive community impact, and develop your skills in a supportive, purpose-driven environment.

In This Role, Your Responsibilities Will Be:

• Security Governance

• Security Risk

• Security Compliance.

What You Will Need:

Competencies:
Knowledge of common IT security frameworks (ISO, NIST, CIS).
Security risk management and stakeholder management.
Experience conducting security risk assessments
Understanding of relevant security compliance requirements.
Building and running third-party risk management programs.

Education & Experience:

• Bachelor’s Degree or any 4-year related course.Master’s degree in Business or Computer Science, an advantage.

• Professional: At least 5 years’ experience in security governance, risk, compliance or audit. Previous experience in OT environments is a plus.

• Certifications: Professional security certifications like CISSP, CISA, CISM, preferred but not required. FAIR certification is a plus.

• Project: Demonstrated security project management experience.