Information Security Manager
Job Description
Job Summary:
The primary role of the IT Manager – Information Security & Technology Risk is to assist in the development and delivery of a comprehensive Information Security Control Program for SM Retail, Inc. to assure that information – created, acquired, or maintained by the Company and its authorized users, is utilized in accordance with its intended purpose.
Responsibilities:
1. Assist in the development and implementation of the Cybersecurity Strategy and Control Framework for identification, detection, prevention, response and recovery
2. Perform Cybersecurity control effectiveness review in order to gauge and measure the progress in achieving the objectives of enabling credible cybersecurity defense and identify the gaps as well as effectively work on confirmed areas for corrective action, risk mitigation, transfer and/or acceptance
3. Conduct regular research and review/study on Information Security, relevant current Technological developments and emerging trends including new legislations or regulatory updates to appropriately establish/revise the Company’s Information Security and Technology Risk parameters and overall Cybersecurity model to prepare the business units to be compliant and future-ready
4. Contribute to the enhancement/alignment of the Cybersecurity Strategy and Control Framework with leading international standards such as NIST, CIS, COBIT and ISO27001 to apprise the internal ITS team and strengthen company’s Information Security & Technology governance
5. Supervise and work closely with the Company’s Cybersecurity Operations service provider(s) to ensure that outlined Projects and BAU tasks in support of defined Cybersecurity control objectives, policies and standards are properly implemented across the company’s enterprise information and IT assets
Qualifications:
– Bachelor’s Degree in Information Technology, Computer Engineering or any relevant field
– At least 5 years solid experience in Information Security, Technology Governance, Risk and Compliance, IT Service Management, Operations, Project Management, SDLC and Quality Assurance
– With prior experience in leading teams and/or managing projects, guiding and coaching teammates
– Knowledgeable in ISMS and other related information security risk, control and program framework
– Certifications on CISM/CRISC/CISA will be an advantage
