Senior InfoSec Risk & Compliance Manager – Onsite Clark

Sutherland; Mabalacat; On-site; PHP 1,500,000 - 2,300,000; Full time

Job summary

Sutherland in Angeles, Philippines, invites an experienced Senior Manager - InfoSec Risk and Compliance to lead the development, implementation, and management of comprehensive information security risk and compliance programs onsite in Clark. You will drive regulatory alignment, manage risk assessments, and ensure adherence to industry standards.

You will build a high-performing team, oversee audits, and collaborate with IT, Legal, and business units to embed security and compliance into

Qualifications

• 8+ years in information security, risk management, or compliance functions.
• 5+ years in a senior management overseeing security and compliance programs.
• Expertise in risk assessment methodologies (NIST, ISO 27001, COBIT).
• Knowledge of regulatory requirements and compliance standards (GDPR, SOC 2, HIPAA, PCI-DSS, or equivalent).
• Proven ability to develop and implement security policies, procedures, and governance frameworks.
• Excellent analytical and problem-solving skills with the ability to translate complex security concepts for diverse audiences.
• Strong organizational and project management capabilities with demonstrated ability to manage multiple initiatives simultaneously.
• Experience conducting security risk assessments and audit management.

Responsibilities

• Develop and execute information security risk management strategies aligned with organizational objectives and regulatory requirements.
• Design, implement, and maintain compliance frameworks and policies in accordance with applicable standards (ISO 27001, SOC 2, GDPR, and other relevant regulations).
• Conduct comprehensive risk assessments and vulnerability analyses to identify, evaluate, and prioritize security risks across the organization.
• Lead cross-functional teams to remediate identified risks and compliance gaps within established timelines.
• Manage audit activities, including internal and external audits, and coordinate remediation efforts to address findings.
• Establish and oversee vendor risk management programs to ensure third-party security compliance.
• Develop and deliver security awareness and compliance training programs to all organizational levels.
• Prepare and present risk and compliance reports to senior leadership and the board of directors.
• Stay current with evolving regulatory landscapes and emerging security threats to ensure organizational preparedness.
• Collaborate with IT, Legal, and Business units to integrate security and compliance into organizational processes.
• Manage compliance calendars and ensure timely submission of regulatory documentation and certifications.
• Build and mentor a high-performing compliance and risk management team.

Skills

Information security

Risk management

Compliance management

Governance

Policy development

Audit management

Stakeholder communication

Project management

Regulatory knowledge

Tools

GRC tools

Job description

Sutherland in Angeles, Philippines, invites an experienced Senior Manager - InfoSec Risk and Compliance to lead the development, implementation, and management of comprehensive information security risk and compliance programs onsite in Clark. You will drive regulatory alignment, manage risk assessments, and ensure adherence to industry standards.

You will build a high-performing team, oversee audits, and collaborate with IT, Legal, and business units to embed security and compliance into