Information Technology Security Manager

About the role

The Information Technology Security Manager will support the Corporate Information and Technology Management Head in overseeing the organization’s information security governance, risk, and compliance program. This senior role ensures that security policies, standards, and controls are consistently applied across all San Miguel businesses.

Key responsibilities

• Assist the corporate IT head in managing Infosec governance, risk, and compliance activities.
• Lead the development, implementation, and maintenance of security policies, standards, and procedures.
• Conduct compliance audits, risk assessments, and security reviews to ensure alignment with organizational policies.
• Liaise with the Corporate Data Privacy Office, Business IT Managers, and corporate-wide IT security teams.
• Act as process owner for ongoing compliance activities and oversee adherence to standards such as NIST, ISO 27001, CIS, and COBIT.

Required profile

• Minimum 5 years of experience in information security (or 3 years with multiple companies).
• Background in security governance, policy development, compliance audits, and risk assessments.
• Strong knowledge of industry standards (NIST, ISO 27001, CIS, COBIT).
• Relevant certifications (Security+, ISO 27001, ITIL, CISA, CISM, CRISC, CGEIT, CISSP) are a plus.
• Excellent technical and business writing, presentation, and communication skills.
• High personal integrity and trustworthiness.

Required skills

• NIST framework
• ISO 27001
• CIS controls
• COBIT
• Security+
• ITIL
• CISA
• CISM
• CRISC
• CGEIT
• CISSP