Systems Security Manager

TELUS Digital Philippines; Quezon City; Híbrido; PHP 1.500.000 - 2.100.000; Jornada completa

Descripción de la vacante

TELUS Digital Philippines is seeking a Systems Security Manager to lead security, compliance, governance, risk management, and control assurance across the APAC and Africa regions.

Based at Vertis North under a hybrid work arrangement, the role provides strategic direction and oversight to business units in a BPO environment, ensuring compliance requirements are understood, embedded in operations, and supported by effective controls.

Formación

• Experience leading security compliance and governance programs across regions.
• Knowledge of regulatory/privacy requirements and client contractual obligations.
• Experience in BPO or regulated, client-driven environments is advantageous.
• Proven ability to coordinate remediation and manage competing priorities.
• Strong written communication and reporting skills.
• Willingness to work night and rotational shifts and travel as required.

Responsabilidades

• Lead the development and execution of a risk-based compliance vision and strategy across the APAC and Africa regions.
• Ensure regional compliance with laws, regulations, policies, privacy requirements, and client obligations.
• Provide assurance over compliance management, control, and governance processes including audit coverage.
• Support audit readiness and maintain effective control and attestation processes.
• Respond to regulatory requests and industry submissions while representing regional interests.
• Investigate non-compliance, assess risk, coordinate remediation, and lead cross-functional response teams.

Conocimientos

Security governance

Regulatory compliance

Risk management

Control assurance

Audit readiness

Cross-functional leadership

Descripción del empleo

About the role

The Systems Security Manager leads security, regulatory compliance, governance, risk management, and control assurance across the APAC and Africa regions. Based at Vertis North under a hybrid work arrangement, the role provides strategic direction and oversight to business units in a BPO environment, ensuring compliance requirements are understood, embedded in operations, and supported by effective controls. The position reports to the Director of Security Compliance and works across client-facing and internal operations to address privacy, telecommunications, information security, contractual, and regulatory requirements.

Key responsibilities

• Lead the development and execution of a risk-based compliance vision and strategy across the APAC and Africa regions.

• Ensure regional compliance with applicable laws, regulations, policies, procedures, privacy requirements, telecommunications standards, security obligations, and client contractual requirements.

• Provide assurance over compliance management, control, and governance processes, including appropriate audit coverage of high-risk areas.

• Support audit readiness and maintain effective control and attestation processes.

• Respond to regulatory requests and industry submissions while representing regional interests.

• Investigate non-compliance issues, assess risk, coordinate remediation, and lead cross-functional response teams where required.

• Make independent decisions in ambiguous situations to mitigate breach impacts and protect the organisation's brand.

• Work with external regulators to address customer concerns and implement required controls in a timely manner.

• Build strong relationships with business units, compliance representatives, and other stakeholders.

• Develop accurate compliance reports and communicate risk, compliance performance, and remediation progress to senior management.

• Provide leadership and accountability for compliance outcomes across multiple regions.

What we're looking for

• Demonstrated experience in security compliance, governance, risk management, and controls.

• Experience leading or supporting compliance programmes across multiple regions or in a global role.

• Working knowledge of PCI DSS and ISO 27001 audit and control environments.

• Experience with regulatory, privacy, telecommunications, information security, and client contractual requirements.

• Experience in a BPO, outsourcing, or similarly regulated, client-driven operating environment is advantageous.

• Proven ability to investigate issues, coordinate cross-functional remediation, and manage competing priorities.

• Strong stakeholder management, written communication, and reporting skills.

• Sound judgement and the ability to make independent decisions in complex or ambiguous situations.

• Willingness to work night and rotational shifts based on business needs.

• Willingness and ability to travel as required.