Country Cybersecurity Lead (Multinational)

Key ResponsibilitiesCybersecurity Leadership & Technical Oversight

• Lead the end-to-end execution of cybersecurity initiatives across the Philippine organization.
• Oversee the implementation of security controls across networks, infrastructure, applications, and cloud environments.
• Manage local incident response processes, including analysis, coordination, and escalation.
• Conduct or coordinate vulnerability assessments, security reviews, and remediation activities.
• Act as the country's primary escalation point for cybersecurity risks and incidents.

Governance, Risk, and Compliance

• Develop, localize, and maintain cybersecurity policies, standards, and procedures.
• Conduct periodic risk assessments and support internal and external compliance audits.
• Ensure alignment with global frameworks such as ISO 27001, NIST CSF, and internal security requirements.
• Drive cybersecurity awareness, education, and training across the organization.

Data Privacy & Regulatory Compliance

• Oversee compliance with the Data Privacy Act of 2012 and relevant issuances of the National Privacy Commission (NPC).
• Review privacy impact assessments, data processing agreements, and privacy controls for local operations.
• Coordinate data breach response activities, including regulatory notifications if required.
• Advise internal stakeholders on Philippine privacy laws, regulatory expectations, and risk mitigation.

Regulatory Engagement & External Relations

• Serve as the organization's key representative to regulators such as the NPC, DICT, and other relevant government agencies.
• Participate in industry consultations, public-private cybersecurity initiatives, and advisory groups.
• Maintain strong relationships within the Philippine cybersecurity community, including industry associations and professional networks.
• Monitor changes in legislation, emerging threats, and local regulatory developments.

Stakeholder Management & Regional Collaboration

• Work closely with regional and global cybersecurity and privacy teams to implement global programs locally.
• Provide regular reporting on local risks, incidents, projects, and compliance status to regional leadership.
• Communicate complex technical and regulatory issues effectively to business stakeholders and decision-makers.