Manager, Business Security

August 22, 2026

Job DescriptionOVERVIEW:<ul><li>Location: Pasay City, Manila</li><li>Entity: Philippines AirAsia Inc.</li><li>Status: Full-time</li></ul>JOB DESCRIPTION:YOUR ROLE AS A:As a Business Security Manager at Philippines AirAsia, you will report directly to the Group CISO to provide advice, consultation, and awareness of the Group Information Security requirements to technical teams and other employees, and ensure their implementation. You will be responsible for ensuring internal systems and processes in Indonesia are compliant with information security standards (e.g, ISO 27001, PCI DSS, CIS, NIST CSF, etc); monitoring, managing, and closing information security compliance issues. Other responsibilities include identification, evaluation, and interpretation of standards, regulatory, statutory, and member security requirements, control deficiencies, and information security risks. You are the primary point of contact during information security incidents and are responsible for managing the incident. WHAT YOU’LL CHAMPION:Stakeholder Collaboration and Management<ul><li>Acts as the primary cybersecurity leader across the business for Philippines, aligning enterprise cybersecurity strategy and roadmap with business objectives.</li><li>Drive and prioritise implementation and integration/adoption of security capabilities within the BU, including embedding security into business digital projects and operations.</li><li>Ensure the business-specific threat landscape, risks, and regulatory drivers are clearly articulated to the CISO teams and validate cyber architecture decisions that meet the business’s operational and compliance needs.</li><li>Provide Strategic Threat Briefings to Business Leadership.</li></ul>Cyber Governance Risk Compliance(In-Country)<ul><li>Operationalise Cyber Security Risk Management capabilities such as Business Impact Assessment of the Business unit’s digital portfolio of services and applications to identify Crown jewels to be protected in line with Risk appetite. </li><li>Deployment of relevant cybersecurity controls, including required local regulatory compliance, to ensure digital solutions, both applications and services, are developed with a secure-by-design principle. </li><li>Drives Cyber Risk acceptance, risk mitigation, finding management processes, and risk reporting consistently to ensure Cyber Risks are managed and residual risks understood by the leadership.</li><li>Represent cybersecurity in external audits, customer security reviews, and regulatory submissions.</li><li>Actively involved and drive preparations in Business Continuity and Disaster Recovery drills for critical business processes and crown jewels.</li><li>Work with the in-country Data Protection Officer(s) of AirAsia Aviation on data security requirements.</li></ul>Cyber Defence (In-Country)<ul><li>Work with Enterprise Cyber Defence to ensure business assets (e.g., endpoints, network devices, applications, business users, etc.)are updated for purposes of security monitoring and vulnerability management</li><li>Coordinate business communication, impact analysis, business post-incident review, and remediation with the business teams and in compliance with local regulations</li></ul>Change Management<ul><li>Champion Cyber Security Change program activities to drive awareness, behaviours among the business unit, and increase the Cyber Resilience </li><li>Drive implementation and integration/adoption of security capabilities and change management to ensure business alignment and effectiveness.</li><li>Business-level security KPIs/KRIs (e.g., patch compliance, phishing click rates, third-party risk ratings) dashboards, reports to business leaders, and the enterprise CISO.</li></ul>WHO YOU ARE:<ul><li>Bachelor's Degree in Information Technology, or Business with IT, Computer Science, or equivalent</li><li>Minimum 5 years experience in managing Information Security Operation/Governance, Risk Management, and Compliance, or related fields</li><li>Relevant industry certification is an advantage (ISO 27001, CISA, CISSP, CGEIT, etc)</li><li>Working knowledge in common IT/information security-related regulations or standards, especially ISO 27001 and PCI-DSS</li><li>Working knowledge of local information and cybersecurity-related regulations and requirements is a huge advantage</li><li>Ability to develop, review and maintain documentation in a timely manner</li><li>Strong communication (spoken and written), interpersonal, and conflict resolution skills. The ability to establish and maintain rapport with stakeholders is highly desired.</li><li>Strong analytical and critical thinking skills</li><li>Result-oriented, high level of attention to detail, self-starter and motivator, ability to multitask and adjust to shifting priorities.</li></ul>WHAT YOU’LL ENJOY:<ul><li> Physical Wellbeing: Key medical and insurance benefits, maternity expenses, flexible work arrangement, and health and fitness amenities.</li><li>Emotional Wellbeing: Paid time off, wellness programmes, and childcare amenities. </li><li>Financial Wellbeing: Resources relating to financial, personal skills and career growth programmes.</li><li>Allstars Specials: Free flights, unlimited discounted flights, and exclusive discounts with partners. </li><li>A unique Allstar culture like no other</li></ul> OUR HIRING PROCESS:<ul><li>Application Review</li><li>Application Review and Skills Match</li><li>Interview & Assessments</li><li>Background Verification</li><li>Offer Process</li></ul>GET TO KNOW AIRASIA:AirAsiaAirAsia has been the World's Best Low-Cost Airline for 16 consecutive years with over 800 million guests flown. We continue to champion dreams, serve the underserved and connect the world and Asean like no other so Now Everyone Can Fly.GET TO KNOW US:Our story begins in 2001 with a dream, two planes and a 40 million ringgit debt. You’ll know us as the ‘Now Everyone Can Fly’ airline (if you don’t, we’re definitely older than you).Today, we’re more than just an airline. We’re Capital A - a world-class brand that wears many hats. Our mission is to connect people and transform lives in Asean.Above all, we’re Allstars. We believe in the unbelievable and we dare to dream. We also believe in celebrating all individuals. So no matter your culture and background or if you prefer aisle seat to window seat, we’re excited to have you onboard. We are all different - one talent to another - that is how we rely on our differences. At AirAsia, you will be treated fairly and given all chances to be your best.We are committed to creating a diverse work environment and are proud to be an equal opportunity employer. Search Firm Representatives - AirAsia does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place.

Back to blog

Other Jobs To Apply

No other job posts for this day.

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

DISCLAIMER