Senior InfoSec Manager: Policy, Risk & Compliance

Fullsuite; Baguio; On-site; PHP 2,000,000 - 4,000,000; Full time

Job summary

FullSuite is seeking an experienced Information Security Manager to lead our cybersecurity strategy and oversee daily security operations. You will bridge business priorities with technical defense by managing policies, risk assessments, compliance frameworks, and incident response efforts.

You will direct governance, incident response, audits, and risk management while partnering with IT/DevOps to embed security across cloud and system architectures.

Qualifications

• 5+ years in cybersecurity, with at least 2+ years in a team lead or managerial capacity.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• Certifications (At least one required/preferred): CISM, CISSP, CRISC, or CISA.
• Deep understanding of cloud security (AWS/Azure/GCP), network security, identity management, and threat landscapes.
• Strong communication skills to explain complex technical risks to non-technical stakeholders.

Responsibilities

• Governance and Policy: Develop, enforce, and update company-wide information security policies and procedures aligned with industry standards (SOC 2, ISO 27001, and GDPR).
• Incident Response: Lead the incident response team, manage security incident protocols, and conduct post-incident root-cause analysis.
• Compliance and Audits: Ensure compliance with applicable standards (SOC 2, GDPR, ISO 27001) and act as the primary contact for external audits.
• Risk Management: Conduct regular risk assessments, vulnerability scans, and third-party vendor security reviews to prioritize and mitigate risks.
• Security Architecture & Tools: Oversee security tools and partner with IT/DevOps to embed security into cloud and system architectures.
• Team Leadership and Culture: Manage, mentor, and grow the security team while driving company-wide security awareness and phishing training programs.

Skills

Governance

Policy development

Incident response

Risk assessment

Vulnerability scanning

Third-party risk

Security architecture

Cloud security

Team leadership

Security training

Communication

Education

Bachelor’s degree in Cybersecurity, Computer Science, IT

Tools

SIEM

Vulnerability scanners

Audit management tools

Job description

FullSuite is seeking an experienced Information Security Manager to lead our cybersecurity strategy and oversee daily security operations. You will bridge business priorities with technical defense by managing policies, risk assessments, compliance frameworks, and incident response efforts.

You will direct governance, incident response, audits, and risk management while partnering with IT/DevOps to embed security across cloud and system architectures.