Makati City Jobs Information Security Manager Position at Punongbayan & Araullo

Job Info

Company	Punongbayan & Araullo
Position	Information Security Manager
Region	Makati City
Career Level	Assistant Manager/Manager
Work Experience	4 years
Qualification	Bachelor's/College Degree
Type of Work	Full-Time
Minimum Salary	PHP 16.000
Maximum Salary	PHP 38.000

The Information Security Manager is responsible for ensuring that information security and IT-related risks are controlled within acceptable levels in the organization. This position also ensures monitoring of information security systems, policy development, IT risk management, implementation and enforcement of security controls along with ongoing research on the latest and best practices in IT Security and Controls.

PRIMARY DUTIES & RESPONSIBILITIES

A. Work Complexity

1. Develops and manages security for multiple IT functional areas (e.g. applications, systems, network and/or Web across the enterprise.
2. Develops security solutions for critical and/or highly complex assignments.
3. Participate in Security Planning and analyst activities.
4. Provides objective evaluations of security controls, mechanisms and goals in comparison to best practices.
5. Develops, refines and implements enterprise-wide security policies, procedures, and standard across multiple platform and application environments to meet compliance responsibilities.
6. Ensures policies, procedures, standards and system configuration are documented and tracked.
7. Recommends, manages, and implement required changes to IT risk and security policies and procedures.
8. Monitors compliance with security policies, standards, guidelines and procedures.
9. Develop processes and procedures for the information security governance program, including control document reviews, participant assessments preparation, meeting coordination, assessment finding mediation, assisting control owner with remediation plan development, tracking finding through remediation, progress monitoring, reporting and escalation.
10. Assesses client needs against security concern and articulates issues and potential risk to management.
11. Work with IT governance to ensure proper risk management and compliance.
12. Consult with other groups on potential operational impacts of proposed changes to the security environment.
13. Provides security-related guidance on client process.
14. Works closely with IT and development teams to design secure infrastructure solutions and applications, facilitating the implementation and mitigating controls.
15. Work directly with the other internal departments to facilitate information security risk analysis and risk management processes and to identify acceptable level of residual risk.
16. Conduct impact analysis to ensure resources are adequately protected with proper security measures.
17. Assesses potential items of risks and opportunities of vulnerability in the network and on information technology infrastructure and applications.
18. Review risk assessments analyses and effectiveness of information security control activities, and report on them with actionable recommendation.
19. Evaluate security risks and identifies and defines compliance strategies in accordance with policies and standards.
20. Provides information security management with risk assessments and security briefings to advise them of critical issues that may affect customer, or information security objectives.
21. Communicates with multiple department and level of management in order to resolve technical and procedural information security risks.
22. Develops remediation strategies to mitigate risks associated with protection of infrastructure and information assets.
23. Captures, maintains, and monitors information security risk in one repository.

B. Information and Data Security

1. Assesses threats and vulnerabilities regarding information assets and recommends and appropriate security controls and measures.
2. Defines, recommends and manages security controls for information systems.
3. Develops and implements strategies to align information security with business objectives and goals, protecting the
4. Review and delivers reports, making recommendations as needed.

C. Continuity and Disaster Recovery

1. Contributes to designing and implementing the enterprise-wide continuity and disaster recovery management programs, including maturity models, methodologies, souring, strategies, plans, metrics, and scorecards for all components of the program(s)
2. Develop risk management procedure, institution continuity scenarios, and contingencies and advises on continuity disaster recovery plans.
3. Identifies and makes recommendations regarding critical points of failure.
4. Review select changes to ensure they are appropriately assessed, tested, and incorporated in to the larger enterprise plan.
5. Ensures continuity and disaster recovery plans are documented and maintained.
6. Coordinates, assesses and communicates requirements associated with impact, continuity and recovery.
7. Ensure recovery drills are performed.

D. Security Assessments, Monitoring and Reporting

1. Consult with clients on security violations
2. Act as liaison between internal audit and IT to ensure commitments are met and controls are properly implemented.
3. Oversees security incident and response management.
4. Report to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.

E. IT Operations

1. Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and hosts based security systems.
2. Defines and validates baseline security configurations for operating systems, application network and telecommunications equipment.
3. Interface with third-party vendors to evaluate new security products or as part of a security assessment process.
4. Coordinate with vendors to ensure managed services are implemented and maintain appropriately.
5. Analyzes security assessments for third-party vendors.
6. Makes recommendations to address issues.
7. Develops impact analysis.
8. Identifies and coordinates resolutions of information security recovery issues.
9. Provides responsive support for problems found during normal working hours as well as outside normal working hours.

F. Incident Management

1. Assists security operations team in troubleshooting and resolving escalated security
2. Identifies and resolves root causes of security related problem and related issues.
3. Represent security and IT risks among other company risk department and committees.

G. Information Security Performance Management

1. Develops measures to evaluate the information security programs and modifies strategies as appropriate.
2. Identifies areas needing improvement and develops recommendations.
3. Anticipates and addresses potential issues.

H. Research/Evaluation

1. Develops measures to evaluate the information security programs and modifies strategies as appropriate.
2. Identifies areas needing improvement and develops recommendations.
3. Anticipates and addresses potential issues.
4. Leads and review application security risk assessment for new or update internal party applications.
5. Serves in an advisory role in application development and infrastructure project to assess security requirements and controls and ensures that security control is implemented as planned.

QUALIFICATIONS

• Bachelor Degree in Information System, Computer Science, Computer Technology or other related field, or equivalent work experience.
• Working knowledge of the following protocols and attributes as they relate to information security: Ethernet, Windows Server Support, Linux Server support, Microsoft Active Directory, VMWare, SAN, RAID, DNS, DHCP, WEP, AntiVirus/AntiMalware, Exchange, KVM, UPS, OSPF, IEGRP, xBGP, HSRP, IPSec, AES, 3DES, SNMP, TCP, RADIUS, SYSLOG, NTP, LAN/WAN, WEP, F5, Cisco Switch, Cisco Router, Cisco ASA Firewall
• Security Certification (s) (i.e. Certified information System Security Professional (CISSP), or Certified Information Security Manage (CISM) a plus

Apply for Work

Company Description

Company Info

• Industry: Accounting / Audit / Tax Services
• Company Size: 1001 - 2000 Employees
• Average Processing Time: 6 days
• Benefits & Others: Dental, Education support, Miscellaneous allowance, Medical, Loans, Parking, Vision, Regular hours, Mondays - Fridays, Business (e.g. Shirts), Wellness program, Professional licenses, Paid leaves, Discretionary bonuses
• Specific Location: The Enterprise Tower