it Security ManagerSupportNinja

Position Title: IT Security Manager
Job Location: Clark Freeport Zone, Pampanga
Why we're awesome?
SupportNinja is redefining the outsourcing space. Our mission is to "Show the World a Better way to Outsource". What does this mean?
We are more than just a call center - we challenge the status quo with the greatest people and the latest technology. SupportNinja provides a personalized, modern and ethical approach that allows us to provide faster, smarter support than our competitors.
We work with some of the world's most disruptive companies across the tech, lifestyle, music and e-commerce spaces. Our services include customer support for apps, content moderation for streaming music services, B2B lead generation for SaaS companies, and back-office support for one of the world's largest nonprofits. Our client roster includes HotelTonight, Warner Music/Level, Bill and Melinda Gates Foundation, SeatGeek, and more.
Be a Ninja and enjoy the following benefits:
Fun, fast-paced environment where you can stretch your creativity
Stress-free start up accounts
HMO upon hire + 1 dependent upon regularization!
Life Insurance upon hire
10 Paid time off upon regularization + 1 Birthday leave every year!
Competitive Salary
Job Responsibilities: * Reports to the Head of IT regarding security status of remediation efforts to address control gaps and resolve areas of noncompliance.
Develop, implement and maintain IT security standards and procedures
Periodically review the result and methodology from vulnerability scan, penetration test, and conduct regular audit trail review, etc.
Participate in IT security projects and solution implementations
Improve existing alerting rules and handling procedures
Review security alerts for vulnerabilities and security issues. Work with other internal and external teams to mitigate solutions based on advisories and best practice
Act as a central point of contact for the information security and data protection activities.
Lead, manage and improve security Risk, Governance and Data protection program for all SNI offices
Coordinate external audits such as SOC2 & PCI-DSS and manage client assessments of SNI
Develop Risk and compliance strategy in alignment with business requirements, objectives and metrics.
Use key business measurements to identify and drive process improvement opportunities for compliance and risk management
Review and update security policies and standards on a regular basis to address new threats, new industry practices, requirements and standards based on security and compliance requirements
Coordinate regular system and network audits, reviews, and tests to verify compliance with security policies and standards
Monitor internal and external security advisories that impact security, risk and compliance requirements
Support the implementation of security controls and recommend areas for risk reduction.
Support RFP and contractual agreements process in assessing security requirements from potential clients.
Assess and improve security awareness programs.
Evaluate suspected security breaches, work with subject matter experts, and recommend corrective actions.
Qualifications: * 5-10 years of experience in information security, compliance, audit and/or risk management.
Sound knowledge of security legislation/industry standards such as SSAE16/SOC2, ISO 27001, PCI-DSS, HIPAA, NIST and CSA CCM/STAR desirable.
Proven capability of working as a Data Protection officer with sound understanding of Privacy Laws and Frameworks and implementation of Data protection processes and controls
Knowledge of security issues, trends, best practices.
Familiarity with audit, business and segregation of duties, risks, and controls.
Ability to foresee and identify mitigation strategies for risks.
5+ years of applicable experience in working in enterprise risk management, risk management frameworks, concepts and methodologies.
5+ years of experience with internal controls and performing risk assessments.
Proficiency in interfacing with business leaders at various levels including middle and senior management.
Disclaimer:
The duties and responsibilities listed above describe the post as it is in general terms and are not definitive. The post holder is expected to accept any reasonable alterations that may from time to time be necessary.
Powered by JazzHR
SupportNinja

Philippines
Permanent
Full-time