Information Security Lead

Key Responsibilities:

Assist in the development and implementation of information security policies, standards, guidelines and procedures
Conduct periodic evaluations of internal control systems, document the results, make recommendations to remediate the identified risks, and monitor strategies to remedy information security control deficiencies
Conducts information security education, training and awareness activities for general users such as new hire orientation, annual training, creation of security reminders/advisories.
Initiate changes in policies and procedures due to new or revised regulations
Maintain regulatory evidence including policies, standard training, and compliance monitoring
Defense in-depth methodology when assessing the effectiveness of controls including deployment of compensating controls
Manage information asset inventories
Facilitate control testing in form of vulnerability assessment, risk assessments, penetration, and social engineering testing.
Develop key performance metrics to track and ensure compliance with established policies and standards.
Stay current with the latest cyber security threat landscape and notify IT teams of applicability to the Company’s systems
Other duties and responsibilities that may be assigned.

Key Requirements:

Flexi work hours and work location but must be amenable to work onsite (QC or Alabang)
Preferably someone who has led or been part of an audit and certification for ISO 27001
Well versed in different Information and security management systems