Threat Responder

Makati, NCR, Philippines Information Security & Data Protection Office

About the Job

Corporate Title: Assistant Manager to Manager

Work Arrangement: Hybrid

Our Information Security & Data Protection Office team is looking for experienced professionals to join us in Makati City with the role of Threat Responder.

In this role, you will provide support for day-to-day Cybersecurity operations by detecting and responding to threats, events, and incidents. You will provide thought leadership in developing and improving the Bank's Cybersecurity program, enhancing its posture and resiliency. You will assist in implementing and maintaining robust security tools and processes to detect and defend against cyber threats. Additionally, you will proactively guide the response to security incidents, minimizing disruptions, and regularly review and enhance security controls for continuous improvement.

What the role will entail

• Supports strategic alignment between the direction for the architecture, installation, maintenance, and administration of all security solutions and tools and the organization's overall security strategy.
• Supports the design, integration, and implementation of robust security solutions to effectively address enterprise risks and exposures, aligning with the organization's risk tolerance and business objectives.
• Performs the day-to-day activities of security staff, ensuring the optimal performance and operational uptime of all security solutions and tools, maximizing their effectiveness in protecting the organization's assets and information.
• Supports the management and implementation of required security policies and controls through the security tools in adherence to established security standards and procedures, ensuring consistent and comprehensive protection across the organization.
• Supports the development of processes and procedures to establish operational standards and ensure their adherence through standard KPIs/KRIs, driving continuous improvement and maintaining a high level of security effectiveness.
• Supports the coordination and collaboration among internal stakeholders (IT and Technology teams, including Business teams) to ensure comprehensive coverage and compliance with security standards, minimizing security gaps and vulnerabilities.

What we're looking for

• Bachelor's Degree in either Computer Science, Business Management, MIS or any related course.
• Certified training in security management, risk and compliance solutions and practices. CISSP, C-CISO, CISA, CISM, GSEC, CRISC, or related certification(s) is an advantage.
• Experience managing vendor-sourced solutions and consultants, ensuring vendor performance and deliverables meet specifications.
• Must have experience managing complex information technology programs, preferably within the financial services or information security industries.
• Experience in security with security technologies (i.e., Anti-malware, DLP, Threat Detection and Response, Platform Security, etc.).
• Proven work experience in managing cybersecurity threats.
• Deep working knowledge of industry best practices (NIST, ISO, SANS, COBIT, CERT) and Legislative and Regulatory and Industry Compliance Requirements (SOX, PCI, HIPAA, etc.).
• Ability to analyze situations, challenges, and problems with perceptiveness and provide effective insights to address concerns.

What you can expect from joining our team

• Career development and training opportunities.
• Competitive salary package and benefits.
• Performance-based incentives and recognition programs to reward high-performing individuals.
• Opportunity to work with industry experts and be mentored by them.
• Defined career progression paths to guide you in your professional growth.