Infosec and Data Privacy Manager

The Information Security and Data Privacy Manager is in charge of the Information Security Management function, providing line management, leadership and strategic direction for the function and liaising closely with the CIO and other stakeholders.

JOB DESCRIPTION

• Lead the design, implementation, operation and maintenance of the Information Security Management System based on standards, including certification when required
• Maintain information security standards and procedures in compliance with risk assessments and current business requirements
• Act as an internal consulting resource on information security issues
• Facilitate the information security risk assessments
• Review compliance with the information security policy and associated procedures on an ongoing basis via monitoring tools and report from annual security audit to the CIO and other stakeholders
• Coordinate and be active in information security efforts within and across various business units, and cooperate with the IT, HR, legal, financial, and executive offices
• Provide periodic reporting on information security issues to CIO and management and to the information security Steering Committee
• Coordinate security orientation and security awareness programs
• Cooperation with third parties providing outsourced IT security services, e.g. e-mail anti-virus and anti-spam, firewalls, intrusion detection/prevention systems, etc.
• Co-ordinate responses to information security events
• Ensure adequate security for existing and new information systems
• Maintain awareness of changes in the industry and propose recommendations to improve the organization's computer systems
• Facilitate the configuration of network intrusion detection and prevention sensors and other information security monitoring infrastructure
• Collect, assess, and report upon relevant threat intelligence / actionable security information and appropriately modify tactical operations
• Perform analysis and response to Tier I & II security alert events and incidents
• Assess network traffic patterns and session data for indicators of malicious activity with assistance of IT Security Engineers
• Play a strong supporting role in prompt and effective response to information security incidents
• Perform operational assessment, prioritization, and remediation of enterprise vulnerabilities and exposures
• Supports forensic investigations and penetration testing activity as needed.

People and Development

• Demonstrates and reinforces the leadership behaviours and basic people skills minimum necessary to gain commitment from subordinates.
• Manages, motivates, and evaluates the IT assigned team, including recruiting, retaining, developing, and coaching.
• Communicates and implements corporate policies and procedures.
• Shows interest and willingness to mentor junior team members.

COMPETENCY REQUIREMENTS

(Required knowledge, skills, and attributes to achieve the job goals)

• At least 3 years of professional experience in Information and IT Security
• Knowledge of ISMS and IT Security processes
• Experience in working in a multinational company
• Ability to identify the work required and organize, facilitate and/or perform the work with only minimal guidance from IT leadership management
• Excellent communication skills
• Excellent analytical skills
• Amenable to work in Head Office (Bicol Region)

EDUCATIONAL QUALIFICATIONS

• Bachelor's Degree in Computer Engineering, Bachelor's degree in MIS / Business / IT or a similar subject with strong exposure to information technology

• Job Experience

• At least five (5) years of related experience or in a similar capacity

Job Type: Full-time

Work Location: In person