Manager, Information Security Risk and Data Privacy

Education:

Bachelor's Degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or related field

Master's Degree in IT, Cybersecurity, Law, Risk Management, or MBA is an advantage

Required Skills and Work Experience:

Minimum 5–8 years of experience in Data Privacy, IT Security, Risk Management, Compliance, or Governance roles.

At least 3 years in a managerial or leadership capacity handling cross-functional teams or enterprise programs.

Strong knowledge of Philippine Data Privacy Act of 2012, NPC issuances, GDPR, and other global privacy regulations.

Proven experience in Privacy Impact Assessments (PIA), audits, and risk mitigation planning.

Strong background in IT Governance, SLA monitoring, KPI reporting, and process maturity frameworks.

Experience in security incident management, breach investigations, root cause analysis, and corrective actions.

Familiarity with network security controls, encryption, VPN, ACLs, access management, and cybersecurity frameworks.

Excellent stakeholder management, presentation, policy writing, and people leadership skills.

Certifications (Preferred but not Required)

CIPM – Certified Information Privacy Manager

CIPP/A or CIPP/E – Certified Information Privacy Professional

ISO/IEC 27001 Lead Implementer or Lead Auditor

CRISC – Certified in Risk and Information Systems Control