Senior Information Security Risk & Compliance Lead

Optum; Metro Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Medical Plan (HMO) from Day 1

Dental, Medical, and Optical Reimburse

Life and Disability Insurance

Tuition Fee Reimbursement

Annual Merit Increases

Employee Recognition

Training and Staff Development

All Mandatory Statutory Benefits

Job summary

Optum is seeking a senior information security professional in the Philippines to perform audits, identify control gaps, and implement corrective action plans while aligning security policies with ISO27001, NIST, and ITIL frameworks. You will monitor corrective actions, manage risk assessments, and lead security incident investigations, ensuring compliance and effective communication with stakeholders.

A Bachelor's degree and 6+ years of experience are required; CISSP/CISA/ISO27001 Lead Auditor

Qualifications

• 6+ years of information security experience including ISMS (ISO27001), risk management (ISO31000), HITRUST CSF, NIST CSF, and SOC Type 1/2.
• Auditing skills and ability to manage risk assessments/projects independently.
• Preferred certifications: CISSP, CISA, or ISO27001 Lead Implementer/Auditor.

Responsibilities

• Perform audits to identify control gaps and implement corrective action plans.
• Align security policies/standards with IT infrastructure frameworks (ISO27001, NIST, ITIL).
• Monitor compliance with corrective action plans and address non-compliance issues.
• Lead security incident investigations.
• Analyze business requirements to ensure solutions meet security policies and controls.
• Maintain security metrics and reporting.
• Stay current on information security topics and program requirements.
• Communicate with stakeholders and end users effectively.

Skills

Auditing

Risk assessment

Security governance

Education

Bachelor's degree or higher

Job description

Optum is seeking a senior information security professional in the Philippines to perform audits, identify control gaps, and implement corrective action plans while aligning security policies with ISO27001, NIST, and ITIL frameworks. You will monitor corrective actions, manage risk assessments, and lead security incident investigations, ensuring compliance and effective communication with stakeholders.

A Bachelor's degree and 6+ years of experience are required; CISSP/CISA/ISO27001 Lead Auditor