• Escape the ordinary and start your career journey with us.
• Embark on a fulfilling and engaging career with BSA Solutions Inc.
• Generous benefits + personalized learning and development.
  

About BSA Solutions

We are a talent outsourcing company with offices in the Philippines and Malaysia. We guide, inspire and empower young talents to be the heroes that drive business growth. We are more than just a workplace. We are a family. We create a satisfying work environment, one that you'll look forward to coming to every day. A place where the best and brightest minds meet to build a community of successful companies.

About the Role

We are currently seeking a Quality Management Officer to join our team. In this role, you will be responsible for managing and implementing the information security management system to ensure compliance with ISO standards and drive continuous improvement across the organization.

This is a full-time, permanent, day-shift, office-based position in Cebu City.

Responsibilities

• Maintains the existing ISMS policy, objectives, and procedures in alignment with the organization’s strategic goals and risk management.
• Plan and conduct regular internal audits and management reviews of the ISMS to verify its compliance with ISO 27001 and identify opportunities for improvement.
• Manage and support the resolution of nonconformities, incidents, and corrective actions related to information security.
• Provide guidance and training to staff on information security awareness, roles, and responsibilities.
• Communicate and collaborate with other department and functions to ensure the integration and alignment of information security requirements and best practices across the organisation.
• Maintains the ISMS documentation, records, and evidence to demonstrate its effectiveness and readiness for external audits and certifications. Preferably is familiar with the requirements needed to comply with the standards.
• Monitor and analyze the information security trends, threats, and regulatory changes that may impact the organization and recommend appropriate actions and controls.
• Manage and maintain the relationship with external parties, such as certification bodies, auditors, customers, and regulators, on information security matters and ensure the timely and accurate reporting of information security performance and compliance.
• Support external audits and certifications as needed.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or related field.
• Preferably certification in ISO 27001 Lead Auditor or Lead Implementer, or equivalent but not required.
• At least one year of experience in information security management, auditing, preferably in an ISO 27001 certified organization.
• Knowledge of information security standards, frameworks, and best practices, such as ISO 27001, ISO 27002, NIST, etc.
• Has facilitated in conducting internal and external audits and has done assessments of information security management systems.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaboratively in cross-functional teams.
• High level of integrity, professionalism, and confidentiality, with the ability to handle sensitive and confidential information appropriately.
• Minimum of 3 years of experience in quality management.
• Certification in Lean Six Sigma is a plus.
• Proficiency in MS Office applications.