Business Security Manager

About the role

Philippines AirAsia is looking for a Business Security Manager based in Pasay City, Manila, reporting directly to the Group CISO. The role advises technical teams and employees on Group information security requirements, ensures compliance with standards such as ISO 27001, PCI DSS, CIS and NIST CSF, and acts as the primary point of contact for information security incidents.

Key responsibilities

• Act as the primary cybersecurity leader for the Philippines business, aligning the cybersecurity strategy and roadmap with business objectives and embedding security into digital projects and operations.
• Identify, evaluate and interpret standards, regulatory and statutory requirements, control deficiencies and information security risks, and give strategic threat briefings to business leadership.
• Operationalise cyber security risk management, including business impact assessments, deployment of controls and secure-by-design principles, and drive risk acceptance, mitigation and reporting.
• Represent cybersecurity in external audits, customer security reviews and regulatory submissions, and help prepare business continuity and disaster recovery drills.
• Work with the in-country Data Protection Officer(s) on data security requirements.
• Coordinate business communication, impact analysis, post-incident review and remediation with business teams in line with local regulations.
• Drive the cyber security change programme, raise awareness and behaviour, and report business-level security KPIs and KRIs to business leaders and the CISO.

Required profile

• Bachelor's degree in Information Technology, Business with IT, Computer Science or equivalent.
• At least 5 years of experience managing information security operations, governance, risk management and compliance, or related fields.
• Relevant certifications such as ISO 27001, CISA, CISSP or CGEIT are an advantage.
• Strong communication, interpersonal and conflict resolution skills, and strong analytical and critical thinking abilities.

Required skills

• Working knowledge of common IT and information security regulations and standards, especially ISO 27001 and PCI-DSS.
• Working knowledge of local information and cybersecurity regulations is a big advantage.
• Ability to develop, review and maintain documentation in a timely manner.

What we offer

• Medical and insurance benefits, maternity expenses and flexible work arrangements.
• Paid time off, wellness programmes and childcare amenities.
• Resources for financial, personal and career growth.
• Free flights, unlimited discounted flights and partner discounts.