Security GRC Supervisor

AboitizPower; Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

AboitizPower is seeking a Security GRC Supervisor (IT) in Makati City to lead IT security governance, risk management, and compliance efforts. You will work with the Security team to maintain the ISMS, update asset registries, and enhance security across IT environments.

The role requires 5+ years in security governance, risk, or audit, with CISSP/CISA/CISM preferred. OT experience is a plus. A relevant master's would be advantageous.

Qualifications

• Knowledge of IT security frameworks (ISO, NIST, CIS).
• Experience in security risk assessments and risk management.
• Understanding security compliance requirements and controls.

Responsibilities

• Oversee Security Governance, Risk, and Compliance (GRC) for IT.
• Lead and assist in ISMS maintenance and asset registry updates.
• Review contracts for security clauses and drive third-party risk management.

Skills

IT Security Frameworks

Security Risk Management

Stakeholder Management

Security Risk Assessments

Compliance Requirements

Third-Party Risk Management

Education

Bachelor's degree / 4-year degree

Master's degree (advantage)

Job description

Job Description:

Security GRC Supervisor (IT)

Location: Makati City, Philippines

Job Level: Supervisory

Business Unit: APC

Power your future with AboitizPower.

As Security GRC Supervisor (IT), you will lead and assist the Head of Security GRC in planning, implementing, and overseeing Security Governance, Risk, and Compliance (GRC) areas for IT. This includes ensuring maintenance of the Information Security Management System (ISMS), updating the Information Asset Registry, reviewing contracts for security clauses, conducting comprehensive risk assessments, and driving compliance efforts. You will work closely with AP Information Security to deliver results, create positive community impact, and develop your skills in a supportive, purpose-driven environment.

In This Role, Your Responsibilities Will Be:

• Security Governance
• Security Risk
• Security Compliance.

What You Will Need:

Competencies:
Knowledge of common IT security frameworks (ISO, NIST, CIS).
Security risk management and stakeholder management.
Experience conducting security risk assessments
Understanding of relevant security compliance requirements.
Building and running third-party risk management programs.

Education & Experience:

• Bachelor’s Degree or any 4-year related course.Master’s degree in Business or Computer Science, an advantage.
• Professional: At least 5 years’ experience in security governance, risk, compliance or audit. Previous experience in OT environments is a plus.
• Certifications: Professional security certifications like CISSP, CISA, CISM, preferred but not required. FAIR certification is a plus.
• Project: Demonstrated security project management experience.

Requirements: