Senior Cybersecurity Governance & Risk Leader

Sigmoid; Hinoba-an; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Sigmoid is seeking an experienced Cybersecurity Manager to lead and mature enterprise security programs across governance, risk management, compliance, cloud security, AI security governance, and certification initiatives.

The role oversees IT audits, vulnerability governance, certification ownership, and security programs aligned with SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA, including AI risk governance and Responsible AI initiatives.

Qualifications

• Bachelor’s degree in Cybersecurity / IT / Engineering or related fields.
• 8–12+ years cybersecurity experience.
• 3–5 years in leadership roles.
• Experience in cyber risk, audits, certifications, cloud security, and governance programs.
• Experience supporting client assurance and regulatory initiatives.

Responsibilities

• Define and execute enterprise cybersecurity strategy aligned to business objectives and regulatory requirements.
• Establish security policies, standards, and governance frameworks.
• Drive adoption of security frameworks including NIST CSF, ISO 27001, and CIS Controls.
• Govern security operations from risk and governance perspective.
• Review security incidents, operational risks, trends, and management reporting.
• Lead enterprise cyber risk management programs including risk identification, assessment, treatment, and reporting.

Skills

IT Audit & Compliance

Vulnerability Governance

Cloud Security Governance

Security Governance

Leadership & Stakeholder Management

Education

Bachelor’s degree in Cybersecurity / IT / Engineering or related fields

Job description

Sigmoid is seeking an experienced Cybersecurity Manager to lead and mature enterprise security programs across governance, risk management, compliance, cloud security, AI security governance, and certification initiatives.

The role oversees IT audits, vulnerability governance, certification ownership, and security programs aligned with SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA, including AI risk governance and Responsible AI initiatives.