Senior Information Security Leader: Strategy & Resilience

2GO Group; Philippines; On-site; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Competitive compensation

Performance bonuses

Incentives

Travel perks

Health and wellness programs (Day 1)

Paid time off

Job summary

2GO Group is seeking an experienced information security leader to shape the enterprise security strategy, roadmap, and governance for a subsidiary. You will work with the Cybersecurity Manager and managed services provider to drive security across people, processes, and technology while enabling business growth.

The role emphasizes developing risk-based security programs, incident response, security architecture, and third-party risk management to protect customers and operations across the

Qualifications

• Bachelor of Science in Information Security, IT or equivalent.
• At least 9 years of relevant experience.

Responsibilities

• Lead information security strategy, roadmap, governance and control framework aligned with NIST CSF and CIS Controls.
• Assess and strengthen cyber risk posture with vulnerability assessments, pentesting, threat intel and maturity reporting.
• Lead incident response planning, tabletop exercises, business continuity and recovery procedures, acting as Incident Commander.
• Embed security across applications and technology acquisitions via Secure SDLC, architecture reviews, app/cloud security assessments, and vendor risk management.
• Champion security assurance and audit readiness, drive security awareness programs and report risks to leadership.

Skills

Security strategy

NIST CSF

CIS Controls

Risk management

Incident response

Secure SDLC

Security architecture

Vendor risk management

Audit & compliance

Security awareness

Education

Bachelor of Science in Information Security / IT or equivalent

Tools

None

Job description

2GO Group is seeking an experienced information security leader to shape the enterprise security strategy, roadmap, and governance for a subsidiary. You will work with the Cybersecurity Manager and managed services provider to drive security across people, processes, and technology while enabling business growth.

The role emphasizes developing risk-based security programs, incident response, security architecture, and third-party risk management to protect customers and operations across the