This is a fully remote position, open to applicants in Philippines.

• Create procedures, policies, and work instructions to meet SOC 2 Type 2 and ISO 27001 requirements.

• Develop a 12-month security roadmap that aligns Swiss quality standards with the agility of software outsourcing.

• Create a risk register and prioritize remediation efforts based on their impact on the business.

• Ensure that data management complies with European GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act.

• Standardize the responses to client security questionnaires.

• Draft and implement policies for Incident Response, Access Control, and Business Continuity/Disaster Recovery (BCP/DR).

• Oversee the selection and implementation of EDR, SIEM, and vulnerability scanning tools.

• Demonstrated experience in leading security governance within mid-sized organizations (200–500 employees).

• Familiarity with SOC 2 Type 2 or ISO 27001 certification processes.

• Ideally, experience in outsourcing or software services companies.

• Strong technical background in Software Development Life Cycle (SDLC), CI/CD security, and cloud platforms.

• Proficient in AWS and Google Workspace.

• Capability to convey security concepts to junior technical personnel and non-technical stakeholders.

• Experience conducting client security audits and vendor assessments.

• Experience collaborating with distributed teams across Europe, Asia, and Australia is advantageous.

• Experience with early-stage startups is an added benefit.

• CISSP, CISM, or CISA certification is preferred.

• Opportunities for career and personal development.

• A work culture centered on well-being, trust, and autonomy.

• Flexible work arrangements.

• Remote work options.

• Engage in projects that the company is passionate about.

Fractional CISO

People also viewed