Artificial Intelligence. Automation. Cloud engineering. Advanced analytics. For business leaders, these are key factors of success. For us, they're our core expertise.

We work with iconic brands worldwide. We bring them a unique value proposition through market-leading technology and business process excellence.

We've created over 200 unique inventions under several patents across AI and other critical technologies. Leveraging our advanced products and platforms, we drive digital transformation, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless as a service model.

For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. We tailor proven and rapid formulas, to fit their unique DNA. We bring together human expertise and artificial intelligence to develop digital chemistry. This unlocks new possibilities, transformative outcomes and enduring relationships.

Sutherland

Unlocking digital performance. Delivering measurable results.

Job Description

We're looking for an experienced Senior Manager – InfoSec Risk and Compliance to join our organization in Angeles, Philippines. In this strategic leadership role, you will oversee the development, implementation, and management of comprehensive information security risk and compliance programs. You will drive organizational alignment with regulatory requirements, manage security risk assessments, and ensure adherence to industry standards and best practices. This position requires a decisive leader with strong analytical capabilities and meticulous attention to detail.

Develop and execute information security risk management strategies aligned with organizational objectives and regulatory requirements
Design, implement, and maintain compliance frameworks and policies in accordance with applicable standards (ISO 27001, SOC 2, GDPR, and other relevant regulations)
Conduct comprehensive risk assessments and vulnerability analyses to identify, evaluate, and prioritize security risks across the organization
Lead cross-functional teams to remediate identified risks and compliance gaps within established timelines
Manage audit activities, including internal and external audits, and coordinate remediation efforts to address findings
Establish and oversee vendor risk management programs to ensure third-party security compliance
Develop and deliver security awareness and compliance training programs to all organizational levels
Prepare and present risk and compliance reports to senior leadership and the board of directors
Stay current with evolving regulatory landscapes and emerging security threats to ensure organizational preparedness
Collaborate with IT, Legal, and Business units to integrate security and compliance into organizational processes
Manage compliance calendars and ensure timely submission of regulatory documentation and certifications
Build and mentor a high-performing compliance and risk management team

Qualifications

Required Qualifications:

8+ years of progressive experience in information security, risk management, or compliance functions
5+ years in a senior management or leadership role overseeing security and compliance programs
Demonstrated expertise in risk assessment methodologies and frameworks (NIST, ISO 27001, COBIT)
Strong knowledge of regulatory requirements and compliance standards (GDPR, SOC 2, HIPAA, PCI-DSS, or equivalent)
Proven ability to develop and implement security policies, procedures, and governance frameworks
Excellent analytical and problem-solving skills with the ability to translate complex security concepts for diverse audiences
Strong organizational and project management capabilities with demonstrated ability to manage multiple initiatives simultaneously
Exceptional communication and stakeholder management skills across all organizational levels
Experience conducting security risk assessments and audit management

Preferred Qualifications:

Professional certifications such as CISSP, CISM, or CCSK is added advantage
Experience with Governance, Risk, and Compliance (GRC) tools and platforms
Background in incident response management and security incident investigation
Familiarity with vendor risk management and third-party security assessments
Experience managing security budgets and resource allocation
Knowledge of emerging security threats and industry trends
Experience in regulated industries (financial services, healthcare, telecommunications)

Additional Information

Interested candidates must be willing to work onsite in Clark, Pampanga

Senior Manager InfoSec Risk and Compliance (Clark/ Onsite)