Cybersecurity Specialist

Manulife is looking for a
Cybersecurity Specialist
with a passion for security policies and compliance standards to remediate security compliance issues. The Cybersecurity Specialist will report to the Director of Control Management and Governance and help remediate security findings. The role will lead the corporate-wide risk management function, ensuring all controls are implemented and enforced. This is an opportunity to develop new skills, expertise, and approaches. The successful candidate will ensure industry security best practices and methodologies are applied to our cloud and on-prem environments' design, deployment, and operation. This position identifies cybersecurity issues, improvement opportunities, and best practices to safeguard data and infrastructure from internal and external threats. This role requires a deep technical knowledge of security technologies and a solid understanding of information security and networking.

Position Responsibilities:

• Act as a point of contact for the risk assessment, exception, and exemption process.
• Act as the technical escalation point of contact for all technologies, network security concerns, and other critical governance-related items.
• Fully understand all technologies' control procedures/requirements to effectively coordinate the Artificial Intelligence/Machine Learning and Qualys/Prisma exemption requests with relevant stakeholders.
• Conducts review and assessment of network device vulnerabilities and coordinates with the stakeholders for remediation.
• Build partnerships with the risk management team and experts to ensure completion of technical hardening requirements (THR) mapping and other IT security standard delivery.
• Manage the Power BI Dashboard on Cloud Security Posture Assessment.
• Troubleshoot Qualys/Prisma scanning issues and optimize scan performance.
• Automate the various reports and/or admin processes to improve operation efficiency.
• Coordinate with tower/immediate lead and other concerned units to assess and remediate identified vulnerabilities.
• Provide analysis of vulnerabilities to other team members to assist with overall vulnerability remediation efforts.
• Conduct research and attended training on common attack routes, new cyber security threats, trends, and technologies.

Required Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, IT Security, or a related field or equivalent experience.
• At least 2-3 years of relevant work experience in cybersecurity, IT security operations, networks/infrastructure, and information security.
• Must be amenable to work on night shift schedule, weekends, and Philippine holidays (when needed)
• Willing to work in U.P. Ayala Land Technohub, Quezon City on a hybrid setup.
• Knowledge of Configuration Management (Technical Hardening Requirements (THR)) and other relevant network/infrastructure security standards.
• Knowledge of security assessment on Windows, Unix, Active Directory, and Azure cloud technologies
• Experience in data management/visualization using Power BI.

Preferred Qualifications:

• Proficient in using security assessment tools, specifically Qualys and Prisma Cloud, and business/enterprise applications like ServiceNow, MS Sharepoint, etc.
• Passion in cybersecurity.
• Innovative problem-solving skills with the proven ability to exercise flexibility and judgment.
• Ability to work in a fast-paced environment and be able to multitask.
• Ability to automate the data management and process using scripting languages (PowerShell, Linux Scripting, DAX).

When you join our team:

• We'll empower you to learn and grow the career you want.
• We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
• As part of our global team, we'll support you in shaping the future you want to see.