Security Standards & Framework Manager

GCash; Manila; On-site; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Career growth opportunities

Competitive compensation package

Job summary

GCash is seeking an experienced Information Security Leader to establish and maintain our security policies, ISMS, and PCI DSS alignment. You will drive compliance with ISO 27001, BSP Circular No. 982, and global standards, collaborating with cross-functional teams onsite.

The role requires 5–8 years in information security, a strong risk-management mindset, and excellent communication. You’ll work onsite at least three days a week and help guide audits, certifications, and ongoing improvements

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Math, Business or related field.
• 5–8 years of experience in information security or management systems.
• In-depth knowledge of ISO 27001, PCI DSS, etc.
• Strong understanding of risk management principles.
• Excellent communication and interpersonal skills.

Responsibilities

• Establish, develop, and maintain information security policies, standards, frameworks, and related documentation to align with business requirements, global standards (e.g., PCI DSS, ISO 27001, NIST), and regulatory requirements (e.g., BSP Circular No. 982).
• Conduct periodic reviews and updates to information security policies and documents, ensuring they are current, relevant, and consistent with industry standards and best practices.
• Manage the implementation and ongoing improvement of the Information Security Management System (ISMS) and PCI-DSS certification, including other relevant future certifications.
• Lead and support annual audits, certification initiatives, and compliance documentation updates to secure and maintain necessary security certifications.
• Develop processes and procedures to validate and track compliance with chosen security standards and regulatory requirements.

Skills

Information security knowledge

Risk management

Cross-functional collaboration

Communication skills

Self-starter

Onsite coordination

Education

Bachelor’s degree in IT/CS/Cybersecurity/related field

Job description

Responsibilities

• Establish, develop, and maintain the company's information security policies, standards, frameworks, and related documentation to align with business requirements, global standards (e.g., PCI DSS, ISO 27001, NIST), and regulatory requirements (e.g., BSP Circular No. 982).
• Conduct periodic reviews and updates to information security policies and documents, ensuring they are current, relevant, and consistent with industry standards and best practices.
• Manage the implementation and ongoing improvement of the Information Security Management System (ISMS) and PCI-DSS certification, including other relevant future certifications.
• Lead and support annual audits, certification initiatives, and compliance documentation updates to secure and maintain necessary security certifications.
• Develop processes and procedures to validate and track compliance with chosen security standards and regulatory requirements.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Math, Business or any related field.
• Have 5-8 years of experience in roles related to information security and/or management systems.
• In-depth knowledge of relevant information security regulations and standards such as ISO 27001, PCI DSS, etc.
• Strong understanding of risk management principles.
• Excellent communication and interpersonal skills.
• Ability to work collaboratively with cross-functional teams.
• Amenable to work onsite at least 3 times per week.
• Self-starter and can work in a fast-paced working environment.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country, working with a dynamic and highly collaborative team who want to change the game, a company that values their people with highly competitive and flexible compensation and benefits package.