Job Description
Job Title Information Security Manager
Job Level
Assistant Manager / Manager Reports to BISO
Division One Operations Supervises No
Department Information Technology
Section (if applicable) Technology Operations
Location Philippines Date of Last Revision 10 October 2024
Job Competencies (samples below)
Competency Proficiency Level
(refer to table below)
Description
Product, Project and Portfolio Management 3 Knowledge on technology & security
Job Summary
Responsible for executing technology and Cybersecurity. Performs day-to-day activities in managing Technology risk.
Job Accountabilities
1. Technical Guidance
a. Ensure compliance with local technology related regulatory requirements and GGM policies
b. Execute self-assessments and provide attestation of compliance to technology related GGM policies
c. Manages technology and cybersecurity incidents
d. Manages technology and cybersecurity RCSA for and scenario analysis as first line owner
e. Prepare and submit technology and security update for management reporting
f. Review BISG metrics and address any control gap identified
g. Facilitate GISP solution implementation within LBU
h. Facilitate technology and security related audit
i. Conduct technology and cyber security training to relevant stakeholders
j. Reviews enhances access (e.g., Cloud Storage, SFTP, RMD, etc.)
k. Prepares and completes regulatory required documentations - e.g., Risk and Materiality
Assessment, Critical System Assessment, Cloud Risk Assessment, Cloud Consultation Presentation, Internet Insurance Attestation, etc.
l. Perform the remediation of security-related issues raised by GISP teams.
m. Perform analysis and necessary coordination with relevant teams on the timely remediation of security related KRIs that falls below acceptable threshold.
n. Review requests related to Email and Website access whitelisting.
o. Review and release approved valid quarantined emails.
p. Review and execute security-related dispensations.
q. Review and execute Security Design Checkpoint (SDC) related requests
r. Conduct Third Party Security Assessment
2. Architectural Leadership
Collaborate with other IT / Business Functions in managing technology and security incidents
3. PRUAgilist Champion
Fosters agile mindsets and behaviors, championing and influencing a culture of growth, self-leadership, and development.
4. Problem Solving and Decision Making
Leads solving complex problems and challenges that require the highest competency level as an expert in collaboration with key business stakeholders, tribes, and squads within the organization.
5. Perform other functions as may be assigned.
Leadership 2 Team player
Vendor Management 3 Vendor management capability
Interpersonal Skills and Communications 3 Good communicator
Business Fundamentals 3 Knowledge in Insurance business
Enterprise Risk Management 3
Agile Ways of Working 3
Human Capital Management 3
Business Development 3
Application Lifecycle 3
Architecture 3
Data and Analytics 3
Development and Coding 1 Nice to have but not necessary
Infrastructure 3 Understand servers, databases, networks, clouds, etc
New Technologies 3
Dev Sec Ops 3
Competency Proficiency Level
(refer to table below)
Description
Enterprise Solutions 2
UI/UX/CX/Design/Ergonomics 2
System Integration and Interface Management 3
Tech Strategy and Service Delivery 3
Security and Cyber Security 4 Main role
Proficiency Level Definition
1 – Basic I have heard about it, but I have never learned the theory in details
2 – Intermediate I have learned the theory and can use what I know to practice under supervision or to work with experienced peers
3 – Advanced I have demonstrated that I can deliver/operate on the job, with little to no support
4 – Expert I can perform on any project, I can tackle complex issues on the topic, I can teach
others and I can write articles
Job Specification
Education
Professional Qualifications/Licenses
Bachelor’s degree in information technology, Computer Science or other related courses with 7 years minimum work experienced as Business
Information Security Officer. Insurance background is added advantage
Knowledge (Certification - Technical, Product, Industry, etc.)
Agile Methodology
End-to-end Software Development Lifecycle experience
Certifications (CISSP, CCSP, Project Management, CRISC, CISM, Security+)
Skills critical to job success
Experience in one or more of the following:
Agile Strategy / Agile Transformation / Agile Operating Model
Lean Software Development Lifecycle
Problem Solving and Decision Making
Cybersecurity management
Years of Relevant Work Experience
(State if management experience is required)
At least 7 years minimum overall related experience to IT Security, Cybersecurity, Operations Risks Management. Reports to BISO
Job Types: Full-time, Permanent
Schedule:

• 8 hour shift
• Day shift

Experience:

• Business Information Security Officer: 7 years (Preferred)
• IT Security, Cybersecurity, Operations Risks Management: 7 years (Required)