Senior GRC Lead: InfoSec & Data Privacy

Seven Seven Global Services, Inc.; Metro Manila; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

Seven Seven Global Services, Inc. is seeking a Governance, Risk & Compliance (GRC) Manager – Information Security & Data Privacy to lead the ISMS, privacy program, and compliance activities across the organization.

You will coordinate audits, maintain policies and risk registers, and drive remediation with senior stakeholders. The role requires at least 5 years in information security governance, GRC or related fields, with demonstrated ISO/IEC 27001 expertise and strong policy and

Qualifications

• Bachelor's degree in IT, IS, cybersecurity, risk management or related field.
• At least 5 years of relevant experience in information security governance, GRC, ISMS, data privacy or IT risk/compliance.
• Proven experience with ISO/IEC 27001 implementation, maintenance, audits or certification.
• Experience managing policies, risks, audit findings and remediation activities.
• Experience engaging with auditors, clients and senior stakeholders.
• Strong knowledge of ISO/IEC 27001, GRC, risk, controls and compliance.
• Working knowledge of Philippine data privacy requirements.
• Strong policy governance, investigation and report-writing skills.
• Solid analytical and root-cause-analysis capabilities.
• Ability to translate regulatory and technical requirements into practical controls.

Responsibilities

• Maintain and improve the organization's ISMS in accordance with ISO/IEC 27001.
• Coordinate surveillance, recertification, internal and client audits.
• Maintain security policies, risk registers, control requirements, audit findings and remediation actions.
• Coordinate periodic security risk and control assessments with business and technical owners.
• Lead annual information security awareness activities.
• Lead responses to client security questionnaires, RFPs and due diligence.
• Maintain Data Privacy and Data Protection Program.
• Monitor applicable Philippine and international privacy requirements.
• Maintain integrated view of compliance obligations, risks and corrective actions.
• Coordinate investigations of information security, privacy, compliance and incidents.

Skills

ISO/IEC 27001

GRC fundamentals

Information security governance

Data privacy compliance

Risk management

Audit coordination

Policy development

Stakeholder engagement

Education

Bachelor's degree in IT / IS / Cybersecurity / Risk Mgmt / related field

Job description

Seven Seven Global Services, Inc. is seeking a Governance, Risk & Compliance (GRC) Manager – Information Security & Data Privacy to lead the ISMS, privacy program, and compliance activities across the organization.

You will coordinate audits, maintain policies and risk registers, and drive remediation with senior stakeholders. The role requires at least 5 years in information security governance, GRC or related fields, with demonstrated ISO/IEC 27001 expertise and strong policy and