Information Security Officer
# Information Security Officer **First Metro Securities Brokerage Corporation** · Makati · `On-site` 🕒 **Статус:** *Опубликовано: 5 дней назад* · *Источник: Indeed* --- ### About the Role Job Summary The Information Security Officer will support the Information Security Division across Governance, Risk, and Compliance (GRC) and Cybersecurity Operations, ensuring effective implementation of information security controls, risk management, access governance, and security monitoring activities. The role works closely with the Chief Information Security Officer (CISO), vendors, business units, and relevant committees to maintain compliance with internal policies, regulatory requirements, and information security standards. The position also supports change and access reviews, vendor coordination, incident response, and business-as-usual security activities, while serving as a backup reviewer to ensure operational continuity. Key Responsibilities - Review and co-approve routine and emergency changes with the CISO through the Change Advisory Board (CAB), ensuring proper documentation of testing evidence, rollback plans, and post-implementation reviews. - Serve as backup reviewer for Change Advisory Board matters in the CISO’s absence. - Oversee access requests, approval logs, identity and access management (IAM) tools, and periodic access certification activities. - Ensure completion of access reviews, access inventories, and compliance checklists, escalating significant risks to the CISO. - Monitor security alerts and detections, support threat hunting and use case tuning, and assist in vulnerability management and remediation. - Support 24/7 Managed Security Operations Center (MSOC) oversight, Security Information and Event Management (SIEM) alert triage, and Endpoint Detection and Response (EDR) monitoring. - Assist in developing and distributing threat intelligence advisories, security awareness initiatives, and phishing simulation exercises. - Lead proof-of-concept (POC) evaluations for information security tools and services and coordinate with vendors on service delivery, escalations, contractual matters, and third-party due diligence. - Monitor vendor contracts, project requirements, and renewal timelines, escalating upcoming renewals to the CISO. - Represent the Information Security Division in the IT Steering Committee and other relevant committees, and support management, executive, and regulatory reporting. - Assist in developing, reviewing, and updating information security policies, standards, and procedures. - Maintain risk registers and risk acceptance documentation, and review exception and waiver requests before CISO approval. - Provide technical and security advisory support to business units, escalating complex or high-risk concerns to the CISO. - Support asset management activities, including inventory, disposal, and return documentation. - Coordinate incident response activities and vendor engagement under the direction of the CISO. - Direct and coordinate assigned contractor Information Security Officer support staff. - Maintain complete documentation and audit trails for change reviews, access requests, vendor engagements, and other security-related activities. - Provide backup support to the Information Security Officer – Governance, Risk, and Compliance focus, covering CAB reviews, vendor coordination, and business-as-usual activities during absences or transitions. Qualifications - Bachelor’s degree in Computer Science, Information Technology, or a related field. - At least 3–6 years of relevant experience in information security, particularly in change management, vendor management, or security governance. - Working knowledge of information security frameworks, including ISO/IEC 27001 and the NIST Cybersecurity Framework (CSF). - Knowledge of change management, access control, identity and access management, vulnerability management, and vendor management practices. - Ability to prepare security reports, maintain compliance documentation, and represent the Information Security Division in committee-level discussions. - ISO/IEC 27001 Foundation certification required. - ISO/IEC 27001 Lead Auditor certification to be obtained in accordance with the approved training roadmap. - Strong analytical, problem-solving, organizational, and communication skills. - Resourceful and decisive, with the ability to exercise independent judgment in change and access co-approval decisions. - Ability to coordinate vendors, collaborate with business stakeholders, and manage assigned support personnel effectively. Pay: Php30,000.00 - Php60,000.00 per month Benefits: - Additional leave - Company Christmas gift - Flexible schedule - Free parking - Health insurance - Life insurance - Opportunities for promotion - Paid training - Pay raise - Promotion to permanent employee Work Location: In person
Наблюдалась 2026-10-18, впервые 2026-10-13, источник — Indeed.