Senior Manager of Information Security

Peak Support, a rapidly growing outsourcing firm serving some of today’s most innovative companies, is seeking a Senior Manager of Information Security to join our growing team. Peak Support manages customer service and back-office teams for high-growth companies. Founded in 2015, we are an Inc. 5000 company and a Certified Great Place to Work, with more than 1700 team members in the Philippines and the U.S., and a new location opening in Colombia.

Keeping our clients’ data secure is our top priority.

Reporting to CIO, the Senior Manager of Information Security will build and manage our information security function. They will oversee implementing the compliance framework and the audit certification process. In addition, they will serve as Data Protection Officer, and own all other responsibilities related to data security and compliance. This role will require hands on experience in addition to managerial roles for the team.

Why Peak Support?

If you want to work for high-growth companies, Peak Support is the place to be. Our clients include early-stage startups, unicorns with $1B+ valuations, and old-line companies re-imagining themselves. We have been profitable from day one and we are proud that most of our growth has come from referrals.

We are dedicated to providing exceptional service to our clients AND an exceptional work environment for our team members. We don’t do this with ping pong tables or video games. We do it by creating a positive, encouraging and performance-driven culture that enables our team members to build rewarding, long-term careers.

Peak Support is actively working to create a diverse, equitable and inclusive company. You can read our response letter about Black Lives Matter here. Applicants will be considered without regard to race, color, religion, gender, gender identity or expression, disability, sexual orientation, national origin, age, or veteran status. We would be happy to share the results of our first Workplace Culture & DEI survey with applicants.

Work from Home PLUS

Peak Support has a small headquarters office in Cambridge, MA, but 99% of our team members work from home, so we can hire the best talent, regardless of location. We offer all the convenience of working from home, with the benefits of working for an established organization with an exceptional team and tremendous opportunities for growth.

Peak Support has been remote since day one, so we have built a culture and a set of processes that support the success of our remote team members. When it’s safe, we get together in person. We believe that building offline relationships is critical to successful online work.

**Responsibilities**:

- Develop information security policies, standards and guidelines in line with recognized international standards such as ISO27001 and PCI
- Establish and operate the information security technology infrastructure and toolset
- Drive regular identification and remediation of vulnerabilities
- Identify critical assets and ensure tiered risk-based protection across the footprint
- Ensure that security processes (including those of external service providers) are conducted in line with corporate social responsibility, environmental and technical policies and applicable standards and legislation.
- Implement and manage information and cyber security management status reporting, metrics, and benchmarks.
- Monitor Peak Support’s compliance with the Philippines Data Privacy Act, issuances and guidelines by the Philippines National Privacy Commission (NPC).
- Serve as a contact person of government entities and private individuals relating to all concerning data privacy and security issues or concerns.
- Inform, advice, and issue recommendations to Peak Support and its management relating to its data processing activities
- Check for compliance of 3rd party service providers of whom uses the data of the organization and its customers as well as any relative Data Sharing Agreement and other contractual obligations.
- Conduct Privacy Impact Assessments with regard to the organization’s internal systems as well as its products and services.
- Prepare and create an incident management system and submission of relevant documents to the NPC in the event of a suspected or actual data breach.

**Qualifications**:

- Relevant industry certifications (ex. CISSP, C|CISO, CISM, CISA).
- 5 years managing IT, information security, or risk teams with a record of success indicated by career advancement.
- Strong communication skills
- Strong familiarity with relevant information security frameworks (ISO27001, NIST, CIS 20).
- Must be a critical thinker and analytical
- Superior organizational skills and attention to details
- Team player who works productively with a wide range of people

Pay: From $10,000,000 per month