privacy and Security risk managerGlobe Telecom, Inc.

Job Description
At Globe, our goal is to create a wonderful world for our people, business, and nation. By uniting people of passion who believe they can make a difference, we are confident that we can achieve this goal.
Job Description
Conduct risk assessment and determine compliance with information security and data privacy external frameworks or standards
DUTIES & AND RESPONSIBILITIES
. Lead information security and data privacy audits and assist in securing industry standard certifications or reports including ISO 27001, PCI-DSS, and SWIFT.
. Evaluate any related external frameworks or standards (e.g., ITIL, COBIT, National Institute of Standards and Technology [NIST], etc.) or internal standards to determine relevant information security and data privacy compliance requirements and controls.
. Conduct Vendor Risk Assessments to determine third-party compliance with Globe's information security and data privacy control requirements.
. Periodically review and update Globe's Corporate Information Security Policy, Data Protection Policy, IAM Policy, and other related policies, processes, and manuals to ensure the management of information security and data privacy risks.
. Support the DPO in monitoring information security and data privacy risks of the Globe Group of Companies.
. Build and maintain a risk register and report levels of information security and data privacy risk and effectiveness of controls to key stakeholders.
. Coordinate with the legal team to identify all relevant information security and data privacy compliance requirements.
. Improve Globe's privacy compliance posture by leading and participating in information security and data privacy-related audits and compliance initiatives.
. Engage in continuous data privacy training and education.
. Perform all other duties and tasks that will promote information security and data privacy.
REQUIREMENTS
Work Experience
1. 3 to 5 years of risk management experience.
2. Preferably has a background in telecommunications and/or digital technology
Competency
Group Competency (SANS Institute)
. Information Security Foundation
. Cornerstone Information Security
. Advanced Information Security Principles
Level of Knowledge
1. Graduate of any 4-year related course.
2. Subject matter expert and highly proficient and knowledgeable across multiple partners, vendors and technologies.
Make Your Passion Part of Your Profession. Attracting the best and brightest Talents is pivotal to our success. If you are ready to share our purpose of Creating a Globe of Good, explore opportunities with us.