Systems Security Manager

TELUS Digital; Metro Manila; Hybrid; PHP 1,800,000 - 2,800,000; Full time

Job summary

The role collaborates with clients and internal teams, handles regulatory obligations, privacy, telecom, information security, and audit readiness, and communicates risk metrics to senior management. Hybrid work and travel may be required.

Qualifications

• Demonstrated experience in security compliance, governance, risk management and controls.
• Experience leading or supporting compliance programs across multiple regions or globally.
• Working knowledge of PCI DSS and ISO 27001 audit and control environments.
• Experience in a BPO or regulated, client-driven operating environment is an advantage.

Responsibilities

• Ensure APAC and Africa regions comply with applicable laws, regulations, policies and procedures.
• Provide strategic direction to mitigate compliance risk and embed compliance functions.
• Assure compliance management, governance and reporting to senior management.
• Respond to regulators' requests and coordinate cross-functional remediation.
• Lead investigations and remediation efforts for non-compliance issues.
• Collaborate with regulators to address customer concerns and implement controls.
• Develop relationships to produce compliance reports for leadership.
• Ensure reporting accuracy through attestation and controls across regions.
• Support audit readiness and risk management across business units.

Skills

Security compliance

Governance

Risk management

Internal controls

Tools

PCI DSS

ISO 27001

Job description

The Systems Security Manager leads security and regulatory compliance across the APAC and Africa regions. The role provides strategic direction, oversight, and assurance to business units, helping ensure that compliance requirements are understood, embedded in operations, and supported by effective controls.

In a business process outsourcing (BPO) environment, the manager works across client-facing and internal operations to address requirements involving privacy, telecommunications, information security, contractual obligations, and applicable laws and regulations. The role also supports audit readiness, investigates compliance issues, coordinates remediation, and communicates risk and compliance performance to senior management.

Key Responsibilities

• Responsible in ensuring that the APAC and Africa regions complies with laws and regulations, policies and procedures that apply to all aspects of its operation.
• Responsible for providing strategic direction to business units of APAC and Africa regions to mitigate compliance risk and to ensure that compliance functions are fully integrated and embedded.
• Provides assurance over the APAC and Africa regions' compliance management, control and governance processes to the Director of Security Compliance and Senior Management by developing and executing a Compliance vision and strategy based upon risk and ensuring appropriate audit coverage of the organization’s high compliance risks. (Includes compliance in the areas of privacy, telecom, security, client contractual security regulations and as required with changing laws/regulations & contracts.)
• Responds to regulators requests for industry submissions to influence changes and represent APAC and Africa regions' interests.
• Addresses non-compliance issues through investigation and risk mitigation, as well as, where required, lead cross functional teams to respond to non-compliance with appropriate remediation.
• Provides leadership to make independent decisions on required action in ambiguous situations to mitigate impacts of breaches and protect the organization’s brand.
• Works with external regulators to address customer concerns, implements required controls in timely manner and be accountable for results.
• Develops business unit relationships and solicits input from compliance primes and other sources to develop compliance reports to senior management.
• Ensures business units in APAC and Africa regions implement appropriate controls and/or attestation processes to ensure accuracy of reporting.

Qualifications and Experience

• Demonstrated experience in security compliance, governance, risk management, and controls.
• Experience leading or supporting compliance programs across multiple regions or in a global role.
• Working knowledge of PCI DSS and ISO 27001 audit and control environments.
• Experience with regulatory, privacy, telecommunications, information security, and client contractual requirements is preferred.
• Experience in a BPO, outsourcing, or similarly regulated, client-driven operating environment is an advantage.
• Proven ability to investigate issues, coordinate cross-functional remediation, and manage competing priorities.
• Strong stakeholder management, written communication, and reporting skills.
• Ability to exercise sound judgment and make independent decisions in complex or ambiguous situations.

Work Requirements

• Hybrid work arrangement, with onsite reporting as required.
• Availability for night and rotational shifts based on business needs.
• Willingness and ability to travel as required.