Platform Security Manager

2 days ago

Taguig, National Capital Region, Philippines OwnBank Full time $104,000 - $130,878 per year

The Platform Security function oversees technical security for cloud and on-prem systems, ensuring secure-by- design implementation across applications and infrastructure. It manages access controls, enforces security standards, reviews tools, conducts testing, and validates controls to maintain compliance and reduce risk.

Duties and Responsibilities:

Security Architecture & Engineering

  • Define secure reference architectures for cloud (AWS/GCP), APIs, core banking integrations, and third-party fintech services.
  • Ensure security-by-design for applications and infrastructure using Zero Trust principles.
  • Lead threat modeling and secure architecture reviews of payment systems, onboarding workflows, and core financial services.

DevSecOps & Automation

  • Embed secure SDLC practices by integrating SAST, DAST, and secrets management tools into CI/CD pipelines.
  • Enforce security-as-code and policy-as-code (e.g., using Terraform, OPA).
  • Automate platform compliance checks via Cloud Custodian, Prisma Cloud, or CSPM tools.

Monitoring, Detection & Incident Response

  • Oversee implementation and tuning of SIEM, SOAR, and threat detection systems for real-time monitoring (e.g., GuardDuty, CrowdStrike).
  • Direct incident triage, forensics, and investigation efforts during platform-level security events.
  • Supervise threat intelligence, detection engineering, and forensic evidence collection.

Governance, Risk & Compliance (GRC)

  • Ensure full adherence to BSP Circulars 982/808, PCI-DSS, and ISO 27001.
  • Oversee and update security policies, standards, SOPs, and incident response playbooks.
  • Lead annual risk assessments and third-party security certifications.

Vendor & API Security Oversight

  • Review API authentication, rate limiting, encryption, and Open Finance controls.
  • Evaluate vendors and contracts for outsourcing, privacy, and data security requirements.
  • Approve third-party integrations and ensure onboarding follows BSP outsourcing guidelines.

Cloud Security & Network Hardening

  • Establish cloud security guardrails, multi-cloud governance, and container protection (e.g., CWPP, KMS).
  • Approve and monitor firewall configurations, network segmentation, and remote access controls.

Collaboration & Leadership

  • Lead organization-wide security awareness programs for internal teams, partners, and customers.
  • Serve as lead liaison during BSP inspections, regulatory walkthroughs, and third-party audits.
  • Other tasks as assigned by his/her immediate supervisor

Qualifications:

  • Bachelor's degree in Information Technology or Security, Cybersecurity, Computer Science, or Engineering
  • At least 7 years of experience, with at least 3 in platform or cloud security within fintech or regulated industries.
  • Deep technical understanding of AWS/GCP, Kubernetes, IAM, Terraform, WAFs, encryption, scripting, security architecture, security engineering, security operations, risk management.
  • Strong familiarity with BSP, DPA,PCI-DSS, ISO 27001, OWASP, MITRE ATT&CK.

  • Platform Security Engineer

    4 weeks ago

    Taguig, National Capital Region, Philippines Metrobank Full time

    Press Tab to Move to Skip to Content LinkDesign, evaluates, installs, and administers components and facilities for platform-specific infrastructure. He provides technical support services to personnel in other ITG teams. Plans, prepares, recommends and implements medium-term roadmaps for the enterprise-level infrastructure that he manages.Specific Duties &...

  • Application Security

    4 days ago

    Taguig, National Capital Region, Philippines People Matter PH Full time ₱1,000,000 - ₱1,500,000 per year

    About the RoleWe are looking for a Senior Manager of Application Security to lead the secure development lifecycle across our digital banking platforms. You will manage a team of security professionals, define secure coding practices, and work closely with engineering and product teams to ensure security is built into every stage of software development.Key...

  • Google Cloud Platform Engineer

    3 hours ago

    Taguig, National Capital Region, Philippines Pan Asia Resources PH Inc. Full time ₱800,000 - ₱1,000,000 per year

    In this position, your responsibilities will include designing, deploying, and supporting various Google Cloud Platform solutions and services such as Cloud Run, Google Kubernetes Engine, Google Cloud VMware Engine, and Compute Engine. Your experience should cover secure foundations/landing zone delivery, cloud migrations, and infrastructure as code with...

  • IT Information Security Manager

    4 hours ago

    Taguig, National Capital Region, Philippines Bounty Fresh Food, Inc. Full time $70,000 - $120,000 per year

    Job Summary:The IT Info security Manager is responsible for developing, maintaining, and optimizing IT processes, policies, and documentation to enhance operational efficiency, ensure regulatory compliance, and support knowledge management within the organization. This role involves collaborating with IT teams, business units, and compliance officers to...

  • AWS Platform Engineer

    4 days ago

    Taguig, National Capital Region, Philippines julius_freelancer Full time ₱1,200,000 - ₱2,400,000 per year

    Design and build a reusable AWS platform solution offering for Financial services, catering to Retail Banking, Commercial Banking, Payments, Capital Markets, and Insurance verticals.Design technical solutions on AWS that address customers' requirements for scalability, reliability, security, and performance.Produce high-quality technical design, build...

  • Information Security Manager

    4 weeks ago

    Taguig, National Capital Region, Philippines Strategic Networks, Inc. Full time

    OverviewThe Information Security Manager is responsible for overseeing the implementation and maintenance of the organization's information security strategy. This role ensures that security policies, procedures, and controls effectively protect digital assets and align with regulatory requirements. The manager works closely with IT, compliance, and business...

  • Information Security Manager

    4 weeks ago

    Taguig, National Capital Region, Philippines Strategic Networks, Inc. Full time

    Overview The Information Security Manager is responsible for overseeing the implementation and maintenance of the organization's information security strategy. This role ensures that security policies, procedures, and controls effectively protect digital assets and align with regulatory requirements. The manager works closely with IT, compliance, and...

  • Technical Program Manager, Enterprise Platform Engineering

    4 days ago

    Taguig, National Capital Region, Philippines Google Full time $90,000 - $120,000 per year

    Minimum qualifications:Bachelor's degree or equivalent practical experience.2 years of experience in program management.2 years of experience as Salesforce Developer or Salesforce Architect.2 years of experience in Software Development Life Cycle, Application Compliance Policies, Debugging, System Integration, Security Assessment, Security Controls, and...

  • Information Security Manager

    4 days ago

    Taguig, National Capital Region, Philippines Strategic Networks, Inc. Full time $90,000 - $120,000 per year

    The Information Security Manager is responsible for overseeing the implementation andmaintenance of the organization's information security strategy. This role ensures that securitypolicies, procedures, and controls effectively protecting digital assets and aligning with regulatoryrequirements. The manager works closely with IT, compliance, and business...

  • Security Architect

    4 days ago

    Taguig, National Capital Region, Philippines Ben Edictio Corporated Full time ₱104,000 - ₱130,878 per year

    This is Direct Hire Permanent to our clientSalary offer depends on your experiences and skills. They will assess you. The salary range on this post is not the actual budget of our client but our idea only. Client may still negotiate with you.Position: Incident Response AnalystWork Schedule: Shifting and any shift assigned : Shift (APAC: 6am to 3pm, EMEA: 2pm...