Cybersecurity Lead - Work from home
Twoconnect Manila, Metro Manila, Philippines
Outsourcing and Offshoring Consulting · 501-1,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The Cybersecurity Lead will define and own the organization's cybersecurity strategy, governance, and risk framework across a global IT and operational technology environment. They will lead incident response, manage security toolsets, and drive measurable improvements in security maturity while reporting to executive stakeholders.
What they look for
Requirements
Candidates must have over 8 years of experience in a senior cybersecurity leadership role with proven ownership of security frameworks and maturity programs. Strong expertise in Microsoft enterprise environments and experience managing cyber risk in complex, multi-site organizations is required.
Benefits
Full description
We are seeking an experienced Cybersecurity Lead to oversee cybersecurity strategy, governance and risk for a global manufacturing and engineering organisation. This senior leadership role will drive security standards, manage the cyber risk framework, and guide security improvements across a complex, multi-country IT and operational technology environment. Working closely with executive stakeholders, regional IT providers and a managed security operations team, you will shape the organisation's security roadmap, strengthen resilience, and build a culture of security awareness.
- Define and own the group's cyber security strategy, maturity roadmap and investment priorities, aligned to the business and its risk appetite. Set the standards that IT, regional providers and MSPs must meet.
- Own the cyber risk register, the control framework and the Essential Eight maturity programme. Drive measurable improvement against an agreed target maturity, and report posture and risk clearly to executives and the board.
- Define security architecture principles and requirements across identity, endpoint, network, cloud, and the boundary between corporate IT and operational technology (OT) at manufacturing sites. Embed security into how the environment is designed and how change is governed.
- Own the incident response framework and lead major-incident response, coordinating the analyst, Arctic Wolf, IT teams and the business. Own post-incident review and the improvements that follow.
- Set and assure the security requirements for MSPs and regional providers, and lead the assessment and risk reduction of operational technology and plant networks, an area that spans IT and plant engineering.
- Own the relationship and roadmap for the security toolset (Microsoft Defender, Arctic Wolf and related), ensuring the investment delivers measurable risk reduction, and advise on security implications of major programmes including the D365 rollout.
- Lead and develop the IT Security Analyst, build security awareness across the business, and raise the organisation's overall security maturity and culture.
- Lead a two-person security function comprising this strategic lead role and an IT Security Analyst who handles hands-on monitoring, investigation and remediation, supported by Arctic Wolf as the managed SOC. Maintain a clear separation between setting and owning the security direction and executing it day to day. Set the standard and own the risk; the function below you delivers against it.
- Significant experience in a senior cybersecurity role - security manager, lead, or equivalent - owning strategy, governance and risk, not solely operations. As a guide, 8+ years in cybersecurity with several years in a leadership or strategic capacity.
- Proven ownership of a security framework and maturity programme (Essential Eight, NIST, ISO 27001 or equivalent), with a track record of measurable improvement and executive or board reporting.
- Strong grounding in securing Microsoft enterprise environments (Defender, Entra ID, Microsoft 365) and in working with a managed SOC or MDR provider such as Arctic Wolf.
- Experience managing cyber risk across a complex, multi-site or multi-country organisation, and the judgment to prioritise risk against business reality.
- Genuine capability to face executives, auditors and the business, translating technical risk into decisions, and to hold a security standard against operational pressure.
- Experience of, or genuine appetite for, operational technology (OT) and industrial environment security is a strong advantage given our manufacturing footprint.
Desirable
- Manufacturing, industrial or critical-infrastructure security experience.
- Senior security certifications (CISSP, CISM, or equivalent).
- Experience leading security through a major transformation or ERP programme.
- Familiarity with ITSM-embedded security operations (Freshservice or similar).
Why Join Twoconnect?
We offer more than just a job — we offer a supportive and rewarding career experience. Here’s what you can expect from this opportunity:
- Work from home
- Mon - Fri 7:00 AM – 4:00 PM PHT (adjustments will be made for daylight saving time)
- HMO with 2 free dependents and medical reimbursements
- Government-mandated benefits
- Opportunities to work with leading companies in Australia and beyond
- Training programmes for career development
- Engaging company outings, team activities and wellness sessions
- Supportive, inclusive culture
- Dedicated managers focused on your growth and success
Twoconnect connects highly skilled Filipino professionals with established companies in Australia, New Zealand, the United States, the United Kingdom and Europe, providing direct access to global careers and long-term opportunities.
We offer competitive pay and benefits, additional entitlements and structured career development programs that make employment both financially rewarding and professionally sustainable.
Our industry-leading retention rate demonstrates our commitment to a people-first culture that prioritizes stability, growth and genuine care for every employee.
Twoconnect is an equal opportunity employer. We value cultural diversity and foster an inclusive workplace where every employee is respected and supported as part of a growing global team.
Similar roles
-
Engineering Cybersecurity Specialist - Rail Signalling
Siemens Madrid, Community of Madrid, Spain
-
Cybersecurity Consultant / Senior Consultant – Wavestone Luxembourg
Wavestone Leudelange, Luxembourg
-
Senior Cybersecurity Solutions Architect (NYC)
Bloomberg New York, New York, United States · $190K–$260K/yr
-
Senior Cybersecurity Solution Manager Microsoft Security und SOC (w/m/d)
indivHR | We 💚 IT Recruiting Heidelberg, Baden-Württemberg, Germany
-
Senior Security Engineer
Man Group London, England, United Kingdom
-
Staff Security Engineer Manager, Cloud Abuse Security Engineering
Google Sunnyvale, California, United States · $207K–$300K/yr