Chief Information Security Officer
National Capital Region - Philippines
Job Summary
Role Overview
The Chief Information Security Officer (CISO) is responsible for leading the organizations cybersecurity strategy governance and operational security programs. This role oversees the development and execution of enterprise-wide information security initiatives designed to protect systems applications infrastructure and sensitive data from evolving cyber threats.
The position requires a highly experienced cybersecurity leader with expertise in governance cloud security incident response risk management and security operations within large-scale or enterprise technology environments.
Key Responsibilities
Cybersecurity Strategy & Leadership
- Define and lead the organizations long-term cybersecurity roadmap including strategic initiatives risk reduction goals and performance metrics.
- Develop cybersecurity objectives and reporting frameworks for executive leadership and key stakeholders.
- Build lead and mentor high-performing cybersecurity teams while promoting collaboration accountability and continuous improvement.
- Partner with business and technology leaders to align security initiatives with organizational objectives and transformation programs.
Security Governance & Risk Management
- Establish and enhance cybersecurity governance frameworks standards and operational controls.
- Ensure alignment with industry security standards regulatory requirements and data protection practices.
- Lead initiatives related to risk management data protection encryption identity and access management and privileged access controls.
- Support third-party security assessments and vendor risk management activities.
Security Operations & Incident Response
- Oversee enterprise security operations and incident response capabilities.
- Collaborate with operational security teams to strengthen detection monitoring and response processes.
- Lead the development and continuous improvement of security processes and controls to address evolving cyber threats.
- Ensure security practices are embedded across technology environments and software development processes.
Cloud & Emerging Technology Security
- Define security strategies for cloud platforms containerized environments automation and emerging technologies.
- Drive implementation of cloud security best practices including infrastructure security continuous monitoring and automation frameworks.
- Monitor emerging cybersecurity trends and evolving threat landscapes to proactively improve security posture.
Qualifications
Required
- Bachelors degree in Information Technology Computer Science Engineering or a related field.
- Minimum of 15 years of experience in cybersecurity or information security within enterprise or large-scale technology environments.
- At least 7 years of leadership experience managing cybersecurity teams and organizational security programs.
- Strong knowledge of cybersecurity frameworks standards and compliance requirements such as NIST ISO 27001 and related governance models.
- Deep understanding of cloud security principles infrastructure security automation and modern security architectures.
- Experience leading enterprise security operations governance risk management and incident response initiatives.
- Strong communication and stakeholder management skills including the ability to engage executive leadership and simplify complex security concepts.
- Ability to evaluate emerging cybersecurity risks and adapt security programs accordingly.
Preferred
- Industry certifications such as CISSP CISM CISA or equivalent cybersecurity credentials.
- Experience supporting secure software development and enterprise transformation initiatives.
Key Competencies
- Cybersecurity strategy and governance
- Executive leadership and stakeholder management
- Risk management and compliance oversight
- Security operations and incident response
- Cloud and emerging technology security
- Team leadership and organizational development
- Analytical thinking and strategic decision-making