Smart Outsourcing Solution
IT & Information Security Manager / Data Protection Officer Smart Outsourcing Solution (SOS) Location: Philippines – Fully Remote Employment Type: Full-time, Permanent About The Role We are looking for an experienced IT & Information Security Manager / Data Protection Officer (DPO) to oversee the company’s day-to-day IT operations, information security, user access, IT assets, and data privacy requirements. This is a hands-on role responsible for managing internal IT systems, supporting employees, maintaining security controls, coordinating technology providers, and ensuring appropriate data protection practices across the business. The successful candidate will have a strong background in IT administration and information security, with practical experience in Google Workspace, identity and access management, endpoint security, IT asset management, and data privacy . Key Responsibilities IT & Google Workspace Administration Administer Google Workspace, including Gmail, Drive, Shared Drives, Calendar, Meet, Groups, and Admin Console settings. Manage user accounts, permissions, access changes, onboarding, and offboarding. Maintain appropriate security settings, MFA, audit logs, administrator roles, and access controls. Manage email security settings such as SPF, DKIM, and DMARC. Monitor file sharing, external access, and permissions to help protect sensitive information. Identity & Access Management Manage user access and permissions across business applications and SaaS platforms. Implement role-based access and least-privilege principles. Conduct regular access reviews and address unnecessary or outdated access. Maintain documentation for user access, privileged accounts, and approvals. IT Operations & Support Provide or coordinate Level 1 and Level 2 IT support for employees. Support account, application, device, connectivity, and access-related issues. Manage IT onboarding and offboarding activities. Maintain IT procedures, system documentation, software records, and business continuity documentation. Coordinate technology vendors and service providers as required. IT Equipment & Asset Management Manage the lifecycle of company-issued laptops and other IT equipment. Coordinate procurement, configuration, deployment, tracking, recovery, repair, and secure disposal. Maintain an accurate IT asset register. Ensure devices follow approved security, encryption, patching, and management standards. Information Security Maintain information security policies, controls, and risk documentation. Monitor and coordinate the response to security alerts, vulnerabilities, and incidents. Coordinate vulnerability assessments, penetration testing, and security reviews. Conduct periodic reviews of access, endpoint security, vendors, and IT controls. Support security awareness training and security questionnaires or audits. Data Protection Officer Responsibilities Serve as the company’s designated Data Protection Officer (DPO) . Support compliance with the Philippine Data Privacy Act of 2012 and applicable NPC requirements. Maintain privacy documentation, data inventories, privacy notices, retention requirements, and privacy risk records. Coordinate privacy impact assessments for new systems, vendors, and data-processing activities. Handle data privacy enquiries, complaints, and data-subject requests. Support the privacy and documentation aspects of personal data breach management. Provide guidance on data protection, privacy risks, and privacy-by-design practices. Technology & Vendor Coordination Coordinate with external IT, cybersecurity, software, and technology providers. Review new software and technology solutions from an IT, security, privacy, and support perspective. Monitor software licences, renewals, vendor performance, and service requirements. Ensure appropriate documentation and support processes are maintained for business systems. Requirements Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity , or a related field, or equivalent relevant experience. At least 5 years of experience in IT administration, systems administration, information security, privacy compliance, or a related role. Strong hands-on experience with Google Workspace Administration . Experience with identity and access management, role-based access controls, and SaaS platforms . Working knowledge of endpoint security, device management, vulnerability management, backup/recovery, and incident response. Experience managing IT equipment, asset registers, deployment, recovery, and secure disposal. Practical understanding of the Philippine Data Privacy Act, NPC requirements, and DPO responsibilities . Experience working with third-party IT, cybersecurity, software, or technology providers. Strong troubleshooting, documentation, analytical, and organisational skills. Strong written and verbal English communication skills. High level of integrity and discretion when handling confidential employee, candidate, client, and company information. Preferred Qualifications Google Workspace Administrator or relevant Google Cloud certification. DPO, data privacy, or privacy compliance training/certification in the Philippines. Security certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, ISO 27001 , or equivalent. Experience working in an EOR, BPO, HR, payroll, recruitment, or similar environment handling sensitive personal information. What We Offer Fully remote work arrangement 13th month pay Paid leave SSS, PhilHealth, and Pag-IBIG Opportunity to take ownership of IT operations, information security, and data privacy within a growing organisation Pay: Php90,000.00 - Php100,000.00 per month Experience: IT & Information Security Management: 5 years (Preferred) Work Location: Remote
Smart Outsourcing Solution
