1. Assist CIS Head in Security Strategy and Policy Development - Develop, review and maintain information security policies, standards, guidelines and procedures. - Ensure alignment of the information security strategy with the ABS-CBN's business goals. - Identify and evaluate emerging security threats and technologies and identify ways to mitigate the risks.

2. Lead the Risk Management Function - Conduct regular risk assessments of ABS-CBNs digital assets and perform vulnerability assessments. - Develop and implement risk mitigation strategies. - Monitor and manage security incidents and breaches.

3. Help in Information Security Compliance and Audit Tracking - Ensure compliance with relevant regulations, standards, and frameworks (e.g., ISO 2700x,CIS, NIST, etc.). - Prepare for and support internal and external security audits. - Maintain documentation and evidence of compliance activities.

4. Review and Approve Security Awareness and Training Execution - Develop and deliver security awareness programs for employees. - Promote a culture of security within the organization. - Provide training and guidance to technical staff on security best practices.

5. Collaboration and Communication - Act as a liaison between the Info Sec team and other units to enhance cooperation for culture of security. - Communicate security-related issues to concerned business units

6. Security Operations - Oversee daily security operations, including monitoring and responding to security events. - Ensure proper configuration and management of security tools (e.g. endpoint security, network and cloud security technologies).

• Coordinate with Technology Teams to ensure secure infrastructure and application deployments are safe and compliant. - Perform security administration and configuration for security specific systems and applications including but not limited to: SIEM/SOAR, VAPT Tools, Endpoint Security, Network Security, Cloud and Application Security Systems - Infrastructure related systems administration and maintenance will be handled by technology teams/partner including but not limited to: Server, Cloud and Virtualization, Network, Web and Applications not specific for security.

7. Incident Response - Develop and maintain an incident response plan/ Playbook. - Lead and coordinate response efforts during security incidents. - Conduct post-incident analysis and implement lessons learned to improve security posture.

8. Threat Intelligence and Research - Stay informed about the latest security threats, vulnerabilities, and attack vectors. - Conduct threat modeling and penetration testing to identify security weaknesses. - Integrate threat intelligence into the overall security strategy.

9. Security Architecture and Design - Participate in the design and review of new systems, networks, and applications to ensure they meet security requirements. - Advise on secure architecture and development practices. - Implement security controls and technologies to protect data and infrastructure.

10. Other related tasks that may be assigned by the CIS Head