InfoSec Manager

About the role

First Circle, a fast‑growing NeoBank in the Philippines, is looking for its first dedicated Information Security Manager. You will shape the security strategy, obtain ISO 27001 certification and build a robust security operating model that supports rapid product expansion.

Key responsibilities

• Lead the ISO 27001 certification process from scoping through audit pass.
• Manage external penetration testing, remediation and ensure all findings are closed or formally risk‑accepted.
• Oversee MSSP/SOC operations, monitor alerts, enforce SLAs and drill escalation paths.
• Embed secure‑by‑design principles into engineering and DevOps workflows, maintaining full audit trails.
• Design and maintain security policies, standards and procedures to meet BSP circulars, EPFS, PPMI and PCI DSS requirements.
• Implement least‑privilege controls for users and devices, ensuring no unmanaged device accesses production.
• Maintain a monthly risk register for executive and board review, covering internal and third‑party risks.
• Develop a security‑aware culture through phishing simulations, secure‑coding standards and incident‑response drills.
• Evaluate, deploy and manage security tooling, vulnerability scanning and remediation tracking.

Required profile

• Proven experience establishing security programs in regulated financial institutions.
• Ability to define strategy, prioritize risks and work closely with executive leadership.
• Strong track record of achieving compliance certifications and managing external security partners.

Required skills

• ISO 27001 certification process
• Penetration testing and remediation
• MSSP and SOC management
• PCI DSS compliance
• Vulnerability management and scanning tools
• Secure‑by‑design development practices
• Risk management and risk register maintenance
• Incident response planning and execution

What we offer

• Opportunity to build and lead the first InfoSec function in a high‑growth NeoBank.
• Career growth as the company scales rapidly.
• Collaborative, fast‑moving culture with direct communication.