Cyber Security & Information Governance Lead

Departmental Collaboration & Security Review Responsibilities

• Cross-Departmental Security Audits: Partner with internal IT infrastructure, systems engineering, and network support teams to conduct periodic security reviews of systems, servers, access controls, and network configurations.
• Independent Development Review: Work alongside the Connect Development team to review code deployment pipelines, API integrations, and cloud release architectures from a strict security and vulnerability standpoint.
• IT Policy & Operational Governance: Review, refine, and enforce IT security policies across all operational functions—ensuring identity and access management (IAM), endpoint protection, and patch management schedules adhere to ISMS guidelines
• Change Control Oversight: Serve as the security reviewer in the IT Change Advisory Board (CAB) process to evaluate security implications before major infrastructure changes, cloud migrations, or system integrations go live.

Key Responsibilities:

• ISMS & Governance: Lead the design, implementation, and continuous monitoring of our Information Security Management System (ISMS) and corporate security policies.
• Accreditations & Due Diligence: Direct audit preparation for ISO 27001 and CyberVadis. Act as the primary owner for completing and standardizing complex client cybersecurity questionnaires.
• Data Privacy: Oversee corporate compliance with global data privacy regulations (GDPR, local privacy frameworks like the Philippine Data Privacy Act), conducting DPIAs and data mapping.
• Development Liaison: Provide independent security oversight for application releases, cloud architecture changes, and API integrations in coordination with the Connect Development team.
• Training & Compliance: Develop and execute company-wide cybersecurity awareness training and phishing simulations across international sites.

Key Requirements:

• 5+ years of dedicated experience in cybersecurity, IT risk, or information security governance.
• Hands-on experience implementing or maintaining ISO 27001 and managing assessments like CyberVadis or SOC 2.
• Strong working knowledge of GDPR and standard security frameworks (NIST, CIS).
• Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor preferred.
• Excellent written and spoken English communication skills for international client and audit interactions.