Date Published: 9/5/2017 4:02:00 PM
Department: Information and Operation Technology Security, ITD
Region: Head Office
Number of vacancies: 1
Leads theNGCP’s information & operation technology (IOT) security governance,processes and establishment of IOT security programs
Ensure compliance with Philippine laws, such as but not limited toData Privacy Act (RA10173),Department of Information and Communications Technology Law (RA 10844),Copyright Law (RA 8293) and Cybercrime Prevention Act (RA 10175).
Establishesannual and long-term IOT security and compliance goals, define securitystrategies, metrics reporting mechanisms and program and creates maturitymodels and roadmap for continual program improvements.
Works with consultants, auditors on IOT security assessments and controls
Creates education and awareness programs for NGCP at all levels onsecurity updates, issues & risks, applicable laws and best practices
Keeps abreast on security incidents and acts as primary controlpoint during IOT security incidents.
Convenes Ad Hoc Security Committee as appropriate and provideleadership for breach response and notification actions for NGCP.
Develops, implements and monitor IOT security standards andcompliance
Evaluate new technologies for IOT security
Bachelor’sDegree in Computer Science, Information Technology, Computer Engineering,Electronics and Communications Engineering or any related course.
With atleast seven (7) years experienced in IT and/or Operational Security.
Havelead an enterprise on Information and Cyber Security Management Systemsimplementation.
PreferablyCertified Information Security Manager(CISM) or Certified Chief InformationSecurity Officer (CCISO)
Have indepth knowledge on IOT security standards, programs, and tools such as but notlimited to ISO 27001 to ISO 270005 (Information Security Management SystemsRequirements, Code of Practice, Implementation, and Monitoring,measurement, analysis and evaluation & Risk Management), 27032 (ISMS Cybersecurity),SANS Critical Security Controls, ISA/IEC 64223 (Cybersecurity CertificatePrograms), and NERC (North American Reliability Corporation) standards.
Knowledgeon vulnerability and penetration testing
Organizationaland management skills.
Goodcommunication and writing skills (both in English and Filipino)
Interested applicants are requested to send their updated resume to email@example.com.
« Go Back