Information Security & Compliance Officer

QUALIFICATIONS

• Foundational knowledge:
  • Information security and IT audit
  • Various information security standards, e.g., ISO27001, PCI DSS, SOC 2, HIPAA
  • Risk assessment processes, process mapping activities, contingency planning and incident response
• Strong client service orientation and strong attention to detail
• Good communication skills
  • Proficient in written and spoken English
  • Able to liaise with people across the business
• Able to work well by yourself or with a team and
• Willing to work in Makati

RESPONSIBILITIES

The Information Security & Compliance Officer is responsible for helping ensure the company and its personnel comply with data protection laws and information security standards.

If hired, you will also be tasked to respond to customer inquiries and requests related to information security and data protection.

• Review implemented internal controls to inform and advise in data protection, information security, and compliance matters
• Respond to information security and data protection requests from customers
• Collaborate to improve internal documents and practices related to information security through an established audit process
• Conduct periodic risk assessments to:
  • identify potential information security issues and provide solutions before the risk materializes; and
  • provide cost-effective mitigation plans to the Management
• Support the Information Security and Compliance Manager in communicating with customers, data subjects and regulatory authorities
• Foster a culture of information security and data protection within the company and promote continuous training to maintain data protection awareness