Role Summary

The Security Governance Lead designs, implements, and oversees the organization’s security governance framework ensuring policies, standards, and controls are effective, measurable, and continuously improved. This role drives compliance with frameworks like ISO/IEC 27001:2022, SOC 2, PCI DSS, NIST CSF/800-53, and local privacy laws (e.g., PH Data Privacy Act). Working closely with IT, Legal, HR, and Business Units, the Security Governance Lead fosters risk-based decision‑making, audit readiness, and consistent control adoption across the enterprise.

Key Responsibilities

• Governance Framework & Strategy
• Define and maintain the Information Security Governance model, charters, and decision rights.
• Translate regulatory and business needs into security policies, standards, and baselines.
• Establish OKRs/KPIs and continuous‑improvement roadmaps aligned to risk appetite.
• Policy, Standards & Awareness