Local Cybersecurity Officer
Summary
Country-level cybersecurity officer for Pluxee Philippines: implements global security policies locally, monitors cyber risks and compliance, coordinates incident response with local IT and global SOC, and runs security awareness programs. Requires 6-10 years in cybersecurity/IT security and Microsoft 365 proficiency; certifications like CISSP or CISM are a plus.
Salary: ₱65,000 – ₱85,000 per month
About the role
The Local Cybersecurity Officer is responsible for managing cybersecurity activities within a single country, ensuring that local technology environments, business operations, platforms, and users are protected in line with Pluxee's global cybersecurity strategy and local regulatory requirements. The role acts as the country cybersecurity point of contact, coordinating the local implementation of global security policies, monitoring cyber risks, supporting incident response, and working closely with local IT, business leaders, Risk, Compliance, Legal, Data Protection, and global cybersecurity teams.
Key responsibilities:
1. Local Cybersecurity Deployment
Implement global cybersecurity policies, standards, and controls within the country.
Adapt global cybersecurity requirements to local operational and regulatory needs.
Coordinate local cybersecurity action plans, remediation activities, and maturity improvements.
Ensure local IT and business teams understand and apply cybersecurity expectations.
2. Cyber Risk & Compliance Management
Identify, assess, and monitor cybersecurity risks within the local country environment.
Support local compliance with cybersecurity, data protection, audit, and regulatory requirements.
Coordinate local risk assessments, security reviews, access reviews, and audit follow-up.
Escalate critical risks, incidents, and exceptions to regional or global cybersecurity leadership.
3. Incident Response & Operational Coordination
Coordinate local response to cybersecurity incidents in collaboration with SOC, global cybersecurity, local IT, and business teams.
Support containment, investigation, remediation, evidence collection, and post-incident follow-up.
Ensure local incident escalation procedures are understood and applied.
Contribute to business continuity and crisis response activities from a cybersecurity perspective.
4. Stakeholder Engagement & Awareness
Act as the cybersecurity advisor for local leadership, IT teams, and business stakeholders.
Partner with Legal, Compliance, Risk, Data Protection, HR, and Communications on cyber-related topics.
Deploy local cybersecurity awareness campaigns, training, and communication actions.
Promote a strong cybersecurity culture across the country.
5. Local Security Monitoring & Continuous Improvement
Monitor local cybersecurity KPIs, vulnerabilities, remediation plans, and recurring issues.
Ensure local security documentation, evidence, and reporting are maintained.
Identify opportunities to improve local security practices, processes, and control effectiveness.
Contribute local insights and lessons learned to regional and global cybersecurity communities.
About you
Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.
Work Experience:
6–10 years of experience in cybersecurity, IT security, infrastructure security, risk management, or IT operations.
Experience coordinating cybersecurity activities within a country or operational perimeter.
Experience working with local leadership, technical teams, and global cybersecurity functions.
Experience in regulated, digital, fintech, payments, or B2B2C environments is considered an advantage.
Skills & Certifications:
Strong understanding of cybersecurity controls, risk management, incident response, vulnerability management, and security governance.
Knowledge of local regulatory requirements related to cybersecurity, privacy, or digital services is an advantage.
Relevant certifications such as CISSP, CISM, ISO 27001, Security+, CySA+, or equivalent are considered an advantage.
Proficiency in Microsoft 365 is required.
Competencies:
Cybersecurity Risk Management
Incident Management
Security Controls Implementation
Regulatory Compliance
Cybersecurity Awareness