Deskripsi Pekerjaan
Are you a vigilant guardian of digital infrastructure with a passion for proactive risk management? HCM Nexus is seeking a highly skilled Information Security Officer (ISO) to join our growing team in the heart of Makati City. In this pivotal role, you will be the cornerstone of our cybersecurity posture, ensuring that our data integrity, confidentiality, and availability are maintained against evolving global threats.
As our ISO, you will not just be monitoring systems; you will be instrumental in shaping our internal security policies, driving compliance initiatives, and fostering a security-first culture across the organization. We offer a dynamic work environment where your technical expertise in risk mitigation and incident response will be leveraged to protect critical business assets and client information.
Tanggung Jawab
- Develop, implement, and maintain comprehensive information security policies, standards, and procedures.
- Conduct regular security risk assessments and vulnerability audits to identify potential threats.
- Lead incident response planning and execute rapid mitigation strategies in the event of a security breach.
- Oversee compliance with data privacy regulations (such as the Data Privacy Act of 2012) and international security standards like ISO 27001.
- Provide expert security guidance for IT projects, infrastructure upgrades, and software development lifecycles.
- Conduct organization-wide security awareness training to reduce the risk of social engineering and human error.
- Monitor security infrastructure, including firewalls, SIEM systems, and endpoint protection, to ensure optimal performance.
Kualifikasi
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 3-5 years of professional experience in information security, network security, or systems administration.
- Relevant industry certifications are highly preferred (e.g., CISSP, CISM, CISA, or CompTIA Security+).
- Deep understanding of security frameworks, network architecture, and cloud security principles (AWS/Azure/GCP).
- Proven ability to translate complex security requirements into actionable business solutions.
- Excellent communication skills with the ability to articulate technical security issues to non-technical stakeholders.
- Strong analytical mindset with sharp attention to detail and ability to perform under pressure.