IT & Information Security Manager

IT & Information Security Manager / Data Protection Officer

Smart Outsourcing Solution (SOS)
Location: Philippines – Fully Remote
Employment Type: Full-time, Permanent

About the Role

We are looking for an experienced IT & Information Security Manager / Data Protection Officer (DPO) to oversee the company’s day-to-day IT operations, information security, user access, IT assets, and data privacy requirements.

This is a hands-on role responsible for managing internal IT systems, supporting employees, maintaining security controls, coordinating technology providers, and ensuring appropriate data protection practices across the business.

The successful candidate will have a strong background in IT administration and information security, with practical experience in Google Workspace, identity and access management, endpoint security, IT asset management, and data privacy.

Key Responsibilities

IT & Google Workspace Administration

• Administer Google Workspace, including Gmail, Drive, Shared Drives, Calendar, Meet, Groups, and Admin Console settings.
• Manage user accounts, permissions, access changes, onboarding, and offboarding.
• Maintain appropriate security settings, MFA, audit logs, administrator roles, and access controls.
• Manage email security settings such as SPF, DKIM, and DMARC.
• Monitor file sharing, external access, and permissions to help protect sensitive information.

Identity & Access Management

• Manage user access and permissions across business applications and SaaS platforms.
• Implement role-based access and least-privilege principles.
• Conduct regular access reviews and address unnecessary or outdated access.
• Maintain documentation for user access, privileged accounts, and approvals.

IT Operations & Support

• Provide or coordinate Level 1 and Level 2 IT support for employees.
• Support account, application, device, connectivity, and access-related issues.
• Manage IT onboarding and offboarding activities.
• Maintain IT procedures, system documentation, software records, and business continuity documentation.
• Coordinate technology vendors and service providers as required.

IT Equipment & Asset Management

• Manage the lifecycle of company-issued laptops and other IT equipment.
• Coordinate procurement, configuration, deployment, tracking, recovery, repair, and secure disposal.
• Maintain an accurate IT asset register.
• Ensure devices follow approved security, encryption, patching, and management standards.

Information Security

• Maintain information security policies, controls, and risk documentation.
• Monitor and coordinate the response to security alerts, vulnerabilities, and incidents.
• Coordinate vulnerability assessments, penetration testing, and security reviews.
• Conduct periodic reviews of access, endpoint security, vendors, and IT controls.
• Support security awareness training and security questionnaires or audits.

Data Protection Officer Responsibilities

• Serve as the company’s designated Data Protection Officer (DPO).
• Support compliance with the Philippine Data Privacy Act of 2012 and applicable NPC requirements.
• Maintain privacy documentation, data inventories, privacy notices, retention requirements, and privacy risk records.
• Coordinate privacy impact assessments for new systems, vendors, and data-processing activities.
• Handle data privacy enquiries, complaints, and data-subject requests.
• Support the privacy and documentation aspects of personal data breach management.
• Provide guidance on data protection, privacy risks, and privacy-by-design practices.

Technology & Vendor Coordination

• Coordinate with external IT, cybersecurity, software, and technology providers.
• Review new software and technology solutions from an IT, security, privacy, and support perspective.
• Monitor software licences, renewals, vendor performance, and service requirements.
• Ensure appropriate documentation and support processes are maintained for business systems.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent relevant experience.
• At least 5 years of experience in IT administration, systems administration, information security, privacy compliance, or a related role.
• Strong hands-on experience with Google Workspace Administration.
• Experience with identity and access management, role-based access controls, and SaaS platforms.
• Working knowledge of endpoint security, device management, vulnerability management, backup/recovery, and incident response.
• Experience managing IT equipment, asset registers, deployment, recovery, and secure disposal.
• Practical understanding of the Philippine Data Privacy Act, NPC requirements, and DPO responsibilities.
• Experience working with third-party IT, cybersecurity, software, or technology providers.
• Strong troubleshooting, documentation, analytical, and organisational skills.
• Strong written and verbal English communication skills.
• High level of integrity and discretion when handling confidential employee, candidate, client, and company information.

Preferred Qualifications

• Google Workspace Administrator or relevant Google Cloud certification.
• DPO, data privacy, or privacy compliance training/certification in the Philippines.
• Security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, ISO 27001, or equivalent.
• Experience working in an EOR, BPO, HR, payroll, recruitment, or similar environment handling sensitive personal information.

What We Offer

• Fully remote work arrangement
• 13th month pay
• Paid leave
• SSS, PhilHealth, and Pag-IBIG
• Opportunity to take ownership of IT operations, information security, and data privacy within a growing organisation