IT Cybersecurity and Incident Response Senior Specialist

Established in 1999, AXA Philippines is one of the largest and fastest growing life insurance companies in the country. It offers financial security to more than one million individuals through its group and individual life insurance as well as general insurance products through its subsidiary Charter Ping An.

AXA Philippines is one of the first to introduce bancassurance operations in the country, and is among the pioneers in the investment-linked insurance sector.

AXA now offers a complete range of products for all its customers' insurance and financial protection needs, including savings and investments, health plans, income protection, and health coverage; and through its general insurance subsidiary Charter Ping An Insurance Corporation\: fire, motor car, marine cargo, personal accident, bonds, casualty, and engineering insurance products.

AXA Philippines closed 2017 with P26.4 billion in total premium income and P5.7 billion in gross written premiums from Charter Ping An. Today, AXA has more than 4,000 financial advisers in 36 branches, and 700 financial executives in over 900 Metrobank and PSBank branches nationwide. Charter Ping An, on the other hand, has 22 branches nationwide and 2,007 agents.

AXA Philippines is a joint venture between the AXA Group, headquartered in France, and the Metrobank Group, one of the largest financial conglomerates in the Philippines.

The Metrobank Group is a conglomerate of industry-leading businesses that includes First Metro Investment Corporation, Metrobank Credit Cards, Federal Land, Toyota, and Manila Doctors Hospital. It was hailed Best Bank in the Philippines in 2010, 2011, and 2012 by Euromoney and recognized as the strongest bank in the Philippines by The Asian Banker in 2013. It is owned by the Ty Family whose major business interests include financial services, real estate development, power, and manufacturing.

Required/Must Have:

· years' experience as a security analyst or incident responder or other roles concentrating on threat detection and mitigation.

·       Ability to document all information relevant to a security incident and make them easily understandable by a variety of audience.

·       University degree in Computer Science or related fields.

·       Possesses excellent verbal and written communication and presentation skills in English.

Optional/Good to Have:

·       Knowledgeable in ISO standards 27001/27002

·       CompTIA Cybersecurity Analyst (CySA+)

·       CompTIA Security+

·       Hands-on experience of Security Information and Event Management (SIEM) tool and IP and domain reputation sites.

·       Knowledge on MITRE ATTACK framework or cyber kill chain

·       Experience in security operations, incident handling, digital forensics, and knowledge of industry-standard frameworks such as NIST, ISO 27001, or others.

A global leader in insurance and investments, AXA takes care of 103 million lives in 64 countries worldwide. We actively invest in pioneering and personalized solutions to meet your ever-changing needs and exceed your expectations. In the Philippines, we are in partnership with Metrobank, one of the country's strongest banks.

Please visit for more information.

Main Purpose of the Job:

The IT Cyber Security Threat and Incident Management Senior Specialist is responsible in assisting the IT Operations and Security Head and IT Security Manager in the effective detection and management of Information Security incidents and ensure the confidentiality, integrity, and availability of AXA Philippines' corporate information assets.

Key Accountabilities:

·       Manage and coordinate the response to security incidents, conducting investigations to determine the cause and extent of security incidents. Prepare executive reports for security incident.

·       Monitor Data Leak Prevention (DLP) and User entity Behavior Analytics (UEBA) controls.

·       Maintain incident response plans and procedures and ensure compliance to AXA Group Operations security instructions.

·       Participate in the security incident rehearsals and tabletop exercises.

·       Act as the escalation point of SOC service provider and assess escalated alerts.

·       Perform threat intelligence gathering, analysis of security trends, and continuous improvement of incident response processes.

·       Ensure optimal detection of security alerts.

·       Monitor the performance of SOC vendor, ensure KPI's are met, and issues are addressed.

·       Assist security awareness sessions to mature employees' perspective on IT threat and incident management.

·       Provide audit and assurance related evidence and requirements.

·       Perform other duties and responsibilities that will be assigned by the Management team.

Working Relationships Within Business Unit:

·       Work with CSO, CIO, IT Operations and Security Head, IT Security Manager and Group Operations Security Leaders to gain a clear understanding on the overall corporate direction with regards to security initiatives and control implementation.

·       Work with regional and local IT team heads to ensure they carry out the planned actions and projects to mitigate IT security risks.

·       Work with business department heads to ensure that security is taken into consideration and implement the required actions that fall within the business area.