Information Security Governance Manager

19 hours ago


Metro Manila Philippines Salmon Group Ltd Full time

Join to apply for the Information Security Governance Manager role at Salmon Group Ltd . Salmon is a fast‑growing consumer FinTech group, founded in July 2022 with the vision of creating the best credit‑led, technology‑centric bank in Southeast Asia. Based in the Philippines, we are now a licensed bank and consumer‑lending group, backed by world‑class investors including the International Finance Corporation and the Abu Dhabi sovereign wealth fund. Responsibilities Develop, implement, and maintain the bank’s Information Security Governance Framework , ensuring alignment with BSP regulations, internal policies, and international standards (e.g., ISO 27001, NIST). Oversee the formulation, review, and approval of information security policies, standards, and procedures , ensuring consistency across all business and IT functions. Manage regulatory compliance and audit coordination , including BSP examinations, internal audits, and third‑party assessments. Lead the information security risk management process , ensuring timely identification, assessment, and mitigation of security risks. Develop and maintain key risk and performance indicators (KRIs/KPIs) to monitor the bank’s information security posture and governance maturity. Provide regular management and Board‑level reporting on security governance, compliance status, and risk trends. Oversee third‑party and outsourcing security governance in accordance with BSP Circular 1122, ensuring vendor compliance with contractual and security requirements. Promote a culture of information security awareness and accountability across the organization through training, communication, and governance programs. Education Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field. Professional Experience Minimum of 5–8 years of relevant experience in information/cyber security, IT governance, or risk management, preferably in a banking or financial services environment. Proven experience in policy development, compliance management, risk assessments , and audit coordination . Strong familiarity with BSP regulations and circulars (e.g., 808, 982, 1122, 1140) and international standards such as ISO 27001, NIST, and COBIT. Experience working with or implementing governance, risk, and compliance (GRC) tools is preferred. Certifications One or more of the following: CISM, CRISC, CISSP, CGEIT, ISO 27001 Lead Implementer/Lead Auditor, or equivalent credentials. Skills and Competencies Strong understanding of information security governance, risk, and compliance frameworks . Excellent analytical, documentation, and reporting skills. Strong stakeholder management and communication abilities across technical and executive levels. High attention to detail, with the ability to balance regulatory compliance and business objectives . Demonstrated ability to lead cross‑functional governance initiatives and promote a culture of security and accountability. #J-18808-Ljbffr



  • , Metro Manila, Philippines Nezda Global Full time

    About the Role As Security Engineer Manager – Safe Browsing , you’ll lead a team of technical analysts and specialists focused on detecting and preventing web-based threats at scale. This role combines hands‑on technical leadership with people management, process optimization, and collaboration across international security teams. Location: Manila...


  • , Metro Manila, Philippines Hrtx Full time

    About the job Information & Cyber Security Lead We are looking for an experienced professional to help lead the operations of an Information & Cyber Security Center of Expertise. This role focuses on managing team performance, driving operational improvements, and supporting strategic security initiatives across global teams. Key Responsibilities Operations...


  • , Metro Manila, Philippines Trustwave Full time

    About Trustwave Trustwave is a leading cybersecurity and managed security services provider focused on threat detection and response. We uncover threats that others can’t and respond quicker than others can to protect against the devastating impacts of cyberattacks. We’re a world-class team of cyber consultants, threat hunters and researchers serving...


  • Manila, Philippines Sodali & Co Full time

    Sodali & Co Manila, National Capital Region, Philippines Sodali & Co is a leading provider of shareholder engagement advisory and governance consulting services to corporate clients around the world. The firm provides corporate boards and executives with strategic advice and services relating to a broad range of activities, including mergers and...

  • Information Security

    3 weeks ago


    , Metro Manila, Philippines Hrtx Full time

    Information Security & Infrastructure Strategy Head Seeking a senior Filipino technology leader to head their regional information security and infrastructure capability. This role is ideal for a returnee talent: a Filipino citizen with substantial, hands-on experience working in a senior IT or cybersecurity leadership capacity overseas. The position blends...


  • , Metro Manila, Philippines RoboFinance Full time

    Information Security Analyst (Cybersecurity Incident Response Team) Makati, National Capital Region, Philippines 3 weeks ago Responsibilities Utilize and manage a Data Loss Prevention (DLP) system as the primary tool for monitoring information flows and implementing policies. Administer and maintain information security and anti‑virus protection tools....


  • , Metro Manila, Philippines Big Loan Full time

    Big Loan, National Capital Region, Philippines Information Security Analyst (Cybersecurity Incident Response Team) Location: Makati, National Capital Region, Philippines Responsibilities Utilize and manage a Data Loss Prevention (DLP) system as the primary tool for monitoring information flows and implementing policies. Administer and maintain information...


  • , Metro Manila, Philippines Nezda Global Full time

    About the Role As the Endpoint Security SME, you'll own the Forcepoint DLP suite across endpoint and email protection — from design and deployment to monitoring and forensic investigations. You’ll be the go‑to escalation point for complex DLP issues and guide internal teams on data security best practices. Key Responsibilities Serve as SME for...


  • Manila, Philippines Manulife Full time

    Reporting to the Director, Strategy and Governance, the Manager, Information Risk Management Governance will be responsible for enhanced governance, execution oversight, planning, reporting, communication, performance management, resource management, and ensuring an overall health across activities within Information Risk Management Control Assurance Testing...


  • Manila, National Capital Region, Philippines SCALABLE OS CORP. Full time ₱1,200,000 - ₱2,400,000 per year

    SUMMARYWe are looking for Information Security Analyst, who is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. This position is responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance...