Assistant Manager, Cybersecurity Governance
PDAX is a cryptocurrency exchange and wealth app for Filipino users to trade digital assets, invest in government bonds, and access digital collectibles.
Funding history
Projects
About PDAX
PDAX is a cryptocurrency exchange and wealth app for Filipino users. It enables crypto trading, government bond investments, and digital collectibles access. PDAX is a BSP-licensed virtual asset service provider and offers institutional services via PDAX Prime and PDAX Connect.
Skills
About the Role
You will develop, maintain and enforce cybersecurity policies and control frameworks aligned with industry standards. You will lead risk assessments, maintain risk registers, support audits and ensure regulatory compliance. You will prepare governance reports and dashboards, run awareness programs and phishing simulations, evaluate vendor security, and coordinate incident response testing and tabletop exercises.
Requirements
- Bachelor's degree in IT, Computer Science, Cybersecurity, or related field
- Minimum 5+ years experience in cybersecurity, governance, or compliance roles
- Strong understanding of cybersecurity frameworks and regulatory requirements
- Experience conducting audits, risk assessments, and compliance programs
- Strong communication and stakeholder management skills
- Knowledge of NIST CSF, CIS, ISO 27001
- Cloud governance (AWS/Azure/GCP)
- Regulatory requirements (BSP, AMLC, PDPA, PCI, SOC2)
- Audit methodologies
- Cyber risk scoring and dashboards
Responsibilities
- Develop, maintain, and enforce cybersecurity policies, standards, and procedures
- Establish control frameworks aligned with NIST CSF, ISO 27001, CIS, PCI-DSS
- Conduct periodic policy reviews and control assessments
- Manage policy exceptions and risk acceptance processes
- Lead cybersecurity risk assessments across technologies, vendors, projects, and products
- Maintain cybersecurity risk registers and KRIs/KPIs
- Support regulatory audits and compliance reporting
- Ensure compliance with BSP MORNBFI, AMLC, PDPA, GDPR, SOC 2
- Track remediation of findings and vulnerabilities
- Prepare governance reports, dashboards, and cyber posture scorecards
- Lead monthly/quarterly governance meetings
- Maintain audit trails, evidence, and documentation
- Implement enterprise-wide cybersecurity awareness programs and phishing simulations
- Evaluate vendor cybersecurity maturity and maintain third-party assessments
- Ensure incident response playbooks exist and are tested
- Coordinate tabletop exercises, DR testing, and business continuity checks
