T

Twoconnect

Cybersecurity Lead

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeRemote in PhilippinesNo salary listed

About the Job

Requirements

  • Significant experience in a senior cybersecurity role, such as security manager, lead, or equivalent, owning strategy, governance, and risk rather than solely operations; approximately 8 or more years in cybersecurity with several years in a leadership or strategic capacity.
  • Proven ownership of a security framework and maturity programme such as Essential Eight, NIST, ISO 27001, or equivalent, with measurable improvement and executive or board reporting.
  • Strong grounding in securing Microsoft enterprise environments, including Defender, Entra ID, and Microsoft 365, and experience working with a managed SOC or MDR provider such as Arctic Wolf.
  • Experience managing cyber risk across a complex, multi-site or multi-country organisation and prioritising risk against business realities.
  • Capability to engage with executives, auditors, and the business, translate technical risk into decisions, and uphold security standards amid operational pressure.

Responsibilities

  • Define and own the group's cybersecurity strategy, maturity roadmap, and investment priorities aligned to the business and its risk appetite; set standards for IT, regional providers, and managed service providers.
  • Own the cyber risk register, control framework, and Essential Eight maturity programme; drive measurable improvement against an agreed target maturity and report posture and risk to executives and the board.
  • Define security architecture principles and requirements across identity, endpoint, network, cloud, and the boundary between corporate IT and operational technology at manufacturing sites; embed security into environment design and change governance.
  • Own the incident response framework and lead major-incident response, coordinating the analyst, Arctic Wolf, IT teams, and the business; own post-incident reviews and resulting improvements.
  • Set and assure security requirements for managed service providers and regional providers, and lead assessment and risk reduction for operational technology and plant networks.
  • Own the relationship and roadmap for the security toolset, including Microsoft Defender and Arctic Wolf, ensuring investment delivers measurable risk reduction; advise on security implications of major programmes, including the D365 rollout.
  • Lead and develop the IT Security Analyst, build security awareness across the business, and improve the organisation's security maturity and culture.
  • Lead a two-person security function comprising the strategic lead and an IT Security Analyst responsible for hands-on monitoring, investigation, and remediation, supported by Arctic Wolf as the managed SOC; maintain separation between security direction and day-to-day execution.

Desired Qualifications

  • Experience securing operational technology and industrial environments is a strong advantage.
  • Manufacturing, industrial, or critical-infrastructure security experience.
  • Senior security certifications such as CISSP or CISM, or equivalent.
  • Experience leading security through a major transformation or ERP programme.
  • Familiarity with ITSM-embedded security operations such as Freshservice or similar.

About the Company

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at Twoconnect

See more jobs