Security GRC Supervisor

Aboitiz Power; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Aboitiz Power is looking for a Security GRC Supervisor to lead the planning and implementation of Security Governance, Risk, and Compliance (GRC) areas for IT. This role involves comprehensive risk assessments, maintaining the Information Security Management System, and ensuring compliance with security requirements.

The ideal candidate should have at least 5 years of experience in security governance and relevant IT security certifications. The position offers a supportive environment aimed at community impact and personal development.

Qualifications

• Minimum 5 years’ experience in security governance, risk, compliance, or audit.
• Professional security certifications like CISSP, CISA, CISM preferred.
• Experience in OT environments is a plus.

Responsibilities

• Lead in planning, implementing, and overseeing Security GRC areas for IT.
• Conduct comprehensive risk assessments and drive compliance efforts.

Skills

Knowledge of common IT security frameworks (ISO, NIST, CIS)

Security risk management and stakeholder management

Experience conducting security risk assessments

Understanding of relevant security compliance requirements

Building and running third-party risk management programs

Education

Bachelor’s Degree or any 4-year related course

Master’s degree in Business or Computer Science

Job description

Overview

As Security GRC Supervisor (IT), you will lead and assist the Head of Security GRC in planning, implementing, and overseeing Security Governance, Risk, and Compliance (GRC) areas for IT. This includes ensuring maintenance of the Information Security Management System (ISMS), updating the Information Asset Registry, reviewing contracts for security clauses, conducting comprehensive risk assessments, and driving compliance efforts. You will work closely with AP Information Security to deliver results, create positive community impact, and develop your skills in a supportive, purpose-driven environment.

Responsibilities

• Security Governance
• Security Risk
• Security Compliance

Qualifications

• Knowledge of common IT security frameworks (ISO, NIST, CIS).
• Security risk management and stakeholder management.
• Experience conducting security risk assessments.
• Understanding of relevant security compliance requirements.
• Building and running third-party risk management programs.

Education & Experience

Bachelor’s Degree or any 4-year related course. Master’s degree in Business or Computer Science, an advantage.

Professional Experience

At least 5 years’ experience in security governance, risk, compliance or audit. Previous experience in OT environments is a plus.

Certifications

Professional security certifications like CISSP, CISA, CISM, preferred but not required. FAIR certification is a plus.

Project Experience

• Demonstrated security project management experience.