Information Security and Compliance Manager

• Lead the design, implementation, operation and maintenance of the Information Security Management System based on standards, including certification when required
• Maintain information security standards and procedures in compliance with risks assessments and current business requirements.
• Act as an internal consulting resource on information security issues.
• Facilitate the information security risk assessments
• Review compliance with the information security policy and associated procedures on ongoing basis via monitoring tools and report from annual security audit to the CIO and other stakeholders
• Coordinate and be active in information security efforts within and across various business units, and cooperate with the IT, HR, legal, financial, and executive offices
• Provide periodic reporting on information security issues to CIO and management and to the information security Steering Committee
• Coordinate security orientation and security awareness programs
• Cooperation with third parties providing outsourced IT security services, e.g. e-mail anti-virus and anti-spam, firewalls, intrusion detection/prevention system, etc.
• Co-ordinate responses to Information security events
• Ensuring adequate security for existing and new information systems
• Maintain awareness of changes in the industry and propose recommendations to improve the organization's computer systems
• Facilitates the configuration of network intrusion detection and prevention sensors and other information security monitoring infrastructure.
• Collects, assesses, and reports upon relevant threat intelligence / actionable security information and appropriately modifies tactical operations
• Performs analysis and response to Tier I & II security relevant alerts and events
• Assesses network traffic patterns and session data for indicators of malicious activity with assistance
• Plays a strong supporting role in prompt and effective response to information security incidents
• Performs operational assessment, prioritization, and remediation of enterprise vulnerabilities and exposures
• Supports of forensic investigations and penetration testing activity
• Assists with executing remediation plans for any gaps reported in audits or recommended process improvements that effect core information security services
• Orchestrates network security efforts between operations and application support groups while working with both full time and contractor/consultant resources
• Perform other duties as assigned

People and Development

• Demonstrates and reinforces the leadership behaviours and basic people skills minimum necessary to gain commitment form subordinates.
• Manages, motivates, and evaluates the IT assigned team, including recruiting, retaining, developing and coaching.
• Communicates and implements corporate policies and procedures.
• Interest and willingness to mentor junior team members

Qualifications:

• At least 3 years of professional experience in Information and IT Security
• Knowledge of ISMS and IT Security processes
• Experience in working in a multinational company
• Ability to identify the work required and organize, facilitate and / or perform the work with only minimal guidance from IT leadership management.
• Excellent communication skills
• Excellent analytical skills
• Amenable to work in Head Office (Bicol Region)

Educational Qualifications

• Bachelor's Degree in Computer Engineering, Bachelor's degree in MIS / Business / IT or a similar subject with strong exposure to information technology

Job Experience

• At least five 5 years of related experience or in a similar capacity

Licenses and Certifications

• Related Certification is a plus

Job Type: Full-time

Work Location: In person