Information Security Officer (Hybrid, Nightshift)

About the role

We are seeking an experienced Information Security Officer to lead and enhance our security program in Makati. The role is hybrid with night‑shift hours, focusing on protecting systems, data and business operations while ensuring compliance with global standards.

Key responsibilities

• Develop, implement and maintain information security policies, standards and procedures.
• Conduct security risk assessments and oversee vulnerability and penetration testing.
• Create remediation plans for identified security risks.
• Lead incident response planning, coordination and post‑incident reviews.
• Ensure compliance with ISO 27001, SOC 2, HIPAA, PCI‑DSS, GDPR and other applicable standards.
• Perform security audits and compliance reviews.
• Design and deliver employee security awareness programs.
• Monitor emerging threats and recommend security technologies.
• Manage security initiatives, budgets and resource allocation.
• Collaborate with IT, Compliance, Audit and business teams and present updates to senior leadership.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field.
• Minimum 5 years of experience in information security.
• Proven experience developing and implementing enterprise security programs.
• Experience conducting security risk assessments and managing vulnerability assessments.
• Relevant certifications such as CISSP, CISM or CEH.
• Strong analytical, problem‑solving and communication skills.

Required skills

• ISO 27001
• SOC 2
• HIPAA
• PCI‑DSS
• GDPR
• Vulnerability assessment
• Penetration testing
• Security risk assessment
• Security audit
• Security awareness program development
• Information security policies, standards and procedures
• CISSP
• CISM
• CEH

What we offer

• Lead enterprise‑wide information security initiatives.
• Work closely with senior leadership and cross‑functional teams.
• Drive security strategy, governance and compliance.
• Help strengthen and mature the organization’s security posture.