Total 7 security job vacancies in Legal / Public / Security category in Mandaluyong, Metro Manila

We are looking for a skilled Information Security Governance, Risk, and Compliance (GRC) Specialist to join the Avaloq CISO Governance team. The CISO Governance team is responsible for developing, implementing, and maintaining our organization's Information Security governance, risk management, and compliance programs. The ideal candidate has a deep understanding of information security practices, regulatory requirements, and risk management frameworks. The role is based in Manila.

Your key responsibilities

Your key responsibilities will include the following domains. You don't have to be an expert on everything, but you must be willing to learn!

• Governance and Compliance
  • Participate in the development and maintenance of Avaloq's information security governance framework.
  • Lead and aid with compliance-related issues across stakeholders.
  • Work closely with internal and external audits, both to support the audit activities and to manage the remediation of findings.
  • Report to management and relevant stakeholders on compliance status and security governance effectiveness.
• Policy Management
  • Provide guidance and assist in the drafting, revision, and implementation of security policies and procedures.
  • Monitor and evaluate the effectiveness of implemented policies and procedures.
  • Participate in regular policy reviews to ensure alignment with changing regulations and organizational objectives.
• Security Risk Management
  • Conduct and guide risk assessments to identify potential security threats and vulnerabilities.
  • Conduct security assessment of third-party vendors to evaluate compliance with Avaloq’s security standards.
  • Monitor third-party compliance with agreements and performance against organizational benchmarks.
• Awareness and Advocacy
  • Be an advocate for security among your colleagues.
  • Participate in the development and implementation of a comprehensive cybersecurity awareness program.
  • Craft engaging and informative security training materials for Avaloq employees.
  • Measure the effectiveness of employees' knowledge and competencies and adapt strategies based on feedback and trends.
  • Participate in internal security awareness activities such as new employee onboarding.
  • Stay updated with the latest developments in information security, risk management, and compliance.

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?

This security engineering position will be part of a skilled and highly functioning team where there is a lot of opportunity and enhance existing skills or learn new ones. This role will help troubleshoot, maintain, and act as subject matter experts for our Managed Security Services clients. This role will be supporting a variety of security controls across multiple technology platforms.

About the team:

Managed Security Services (MSS) Border Protection Team is responsible for the following MSS services:

• Firewall Management

• VPN Management

• MFA

About the role:
As an IT Security Analyst with FIS, your skills will be put to the test on the front lines of cyber-crime. Information security is at the heart of fintech and you’ll help protect and secure highly-sensitive financial data for customers around the world.

What you will be doing:

• Implementing information security controls and preventing hackers from infiltrating company information and jeopardizing programs.

• Maintaining and controlling access to security systems and utilizing applicable encryption methods to maintain the company's firewall.

• Working with the user community to understand security needs.

• Proactively handles security vulnerabilities and responds to active threats

• Maintenance, configuration, and deployment of NGFW including but not limited to: Cisco ASA, Fortinet, Palo Alto

• Log analysis and troubleshooting

• Deep understanding of routing and switching technologies, security best practices, L2/L3 networks, Ipv4, NAT, BGP, IPSec, Policy-based routing

• Communicating and working effectively with cross functional teams to deliver solutions.

• Reviewing and Implementing Firewalls in line with company and security best practices

• Experience with project-based work and assisting with customer escalations  

• Experience with scripting technologies and centralized deployment preferred but not required

What you will bring:

• Knowledge of network and security technologies.

• Experience with network design and engineering.

• A bachelor's in computer science or a related field, or the equivalent experience.

• Firewall Management experience

• Broad IT skillset

• Understanding of network flow

• IT fundamentals

• Security fundamentals

• Technical Troubleshooting

Added bonus if you have:

• Previous Security Experience

• Fortigate, Cisco ASA, or Palo Alto Experience

#LI-CV1

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Primary Responsibilities:

• Managing daily security and SD-WAN operational activity, such as but not limited to:
  • Lead and coach the Tier 2 security and SD-WAN group that primarily deald with complex enhanced data services, such as Fortinet security/SD-WAN/LAN/WAN/Wi-Fi, VeloCloud/VMware/Broadcom SD-WAN/LAN/WAN, and Meraki security/SD-WAN/LAN/WAN/Wi-Fi.
  • Complete annual and ad hoc personnel performance evaluations.
  • Train and educate personnel on trouble ticket resolution, communication, ticket prioritization, and follow-up improvement opportunities.
  • Organize and host weekly or bi-weekly training sessions with specifically selected personnel to ensure all technicians can perform to the required standard, and to ensure they maintain existing, or gain new, industry certifications.
  • Ensure that established processes, procedures, policies, troubleshooting/resolution guides, and troubleshooting/resolution walkthroughs are followed.
  • Identify documentation that is required but not present, or requires an update, and assign resources for its completion.
  • Apply continual oversight to all open trouble tickets assigned to Tier 2 security and SD-WAN technicians, throughout the ticket life cycle, to ensure:
    • Timely interaction takes place
    • Ticket resolution is achieved in an appropriate amount of time
    • Communication is detailed, frequent, informative, and correct
    • Customers and agents are pleased with the outcome and level of engagement
    • Detailed and correct root cause data is gathered, per ticket, which is critical information that assists AireSpring in improving the customer experience on a go-forward basis and to eliminate, reduce, or shorten, future similar or related tickets.
  • Review individual and overall key performance indicators, SLAs, SLOs, and provide corrective actions to remedy deviations prior to becoming problems.
  • Assist technicians in their ongoing work on open trouble tickets with the goal to improve the customer experience and reduce the duration of the ticket.
  • Identify patterns where ticket activity can be eliminated or reduced via education, training, improved or additional documentation, process changes, and/or tool enhancement.
  • Act as the primary escalation point of contact for issues raised beyond the technician level and own a timely path to resolution and communication related to the escalation.

Wrist Service Center is looking for an Information Security Lead. The perfect candidate holds a profound understanding of both GRC and operational aspects of Information Security and is preferably an Information Security Architect. This position will be reporting to the CISO and acting as a team lead for currently 4 local information security Specialists at the Manilla office, while also conducting tasks related to the field. The position will be closely working with HQ Security in Denmark. The entire Manilla team is considered part of the Information Security department, led by the CISO.  

As this security team in Manilla is only just being established, the entire team will take part in defining the capabilities of the team – naturally in collaboration with the HQ Security team and the CISO himself. 

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: https://bit.ly/SR_WSCCareers

What you'll be doing:

Lead the Information Security Team at the Manila office

• Define and align initiatives and tasks with the CISO
• Assist the CISO in 
  • Ensuring high work satisfaction among the Manilla Team
  • Ensuring the Manilla team is trained.
  • Managing our backlog and sprints.
• Define the capabilities of the information security department.  

Risk Management 

• Assist in ensuring quality and necessary pace in assessments. 
• Conduct and review Risk Assessments. 
• Monitor/Audit risks and controls 
• Take the top lead on Third-Party Risk management

Operational Security

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Take part in managing our Vulnerability Management. 
• Assess Security Architecture 

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, Security+, ISO27001, CISM, CRISC is a plus
• Great English communication skills
• Proven leadership experience
• Knowledge in:
  • Risks management
  • Third-Party Risk Management
  • Control Management
  • Frameworks like ISO 27001/27002/27005, NIST 800-53, NIST CSF, etc. 
  • Defining policies and procedures
  • Network Security
  • Cloud Security (Azure) 
  • MDR/SIEM/Log Analytics 
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
• Not afraid to challenge the CISO on professional aspects

Location: Times Plaza Building, U.N. Avenue corner Taft Avenue, Manila City

Work setup: On-site

Wrist Service Center is looking for an Information Security Specialist who will focus on operational security. You will hold profound skills within all or some of the belove areas:

• Network Security
• Information Security Architecture
• Cloud Security (Azure)
• MDR/SIEM/Log Analytics
• Incident Response
• Vulnerability and Penetration Testing
• Identity and Access management (IAM)
• Technical Security and Risk assessments
• Disaster Recovery Planning

Note that we are also looking for Information Security Specialists with a focus on Governance, Risk, and Compliance, as well as a Team Lead for the Information Security personnel at Manila. You can find those job postings here: LINKS

What you'll be doing:

Define technical requirements for the organization

• Assist in conducting security and risk assessments as well as technical audits to identify vulnerabilities and ineffective controls.
• Utilize frameworks and active scanning to identify potential for improvements.
• Assist in prioritizing technical initiatives
• Depending on the area, assist in implementing or configuring security controls.

Handle security incidents and incoming tasks from the organization (Tickets)

• Take part in our team's responding to security alerts and security incidents.
• Consult with the organization  

Optimize our incidence response capability

• Take part in managing our incidence response capability (Roles, training, playbooks)
• Configure use cases for our detection and response solutions.

What we're looking for:

• Bachelor’s degree in any course. Graduates in Information Security, Computer Science, Software Engineering, or similar is preferred but not required
• Not required, but holding certifications like Azure Architect, Azure Security, OSCP, OSEP, CISSP, and Security+, is a plus.
• Great English communication skills
• Knowledge in:
  • Network Security
  • Cloud Security (Azure)
  • MDR/SIEM/Log Analytics
  • Incident Response
  • Vulnerability and Penetration Testing
  • Identity and Access management (IAM)
  • Technical Security and Risk assessments
  • Disaster Recovery Planning
  • Mitre ATT&CK and D3FEND

DISCLAIMER: This job posting is intended for the active pooling of candidates who will become part of our talent pool. Your qualifications will be assessed against both current and future job openings. Should your application align with a role that corresponds to your skills and experience, and an opportunity arises, our recruitment team will reach out to you immediately. Please note that this does not guarantee immediate placement or contact. Additionally, we exclusively consider applications from individuals who are Philippine citizens and currently reside in the Philippines during their application process.

Responsibilities

• Oversee the company's IT systems, including hardware, software, and networks.
• Ensure the reliability, security, and efficiency of all IT systems.
• Manage technology projects from conception to completion.
• Develop and enforce IT policies and procedures.
• Analyze the needs of the company's different departments for IT support.
• Collaborate with other departments to identify opportunities for IT-based solutions.
• Stay up-to-date with the latest trends and technologies in the IT field.

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in technology or IT risk management; experience in a supervisory capacity is a plus but not required.
• Strong knowledge of firewalls, endpoint security, mobility management, vulnerability scanning, and network and system security protocols.
• Experience with cloud-based solutions (e.g. AWS, Azure, Google Cloud), project management tools, and methodologies.
• Proficient in programming languages (e.g. Python, Java, C).
• Excellent communication and problem-solving skills.

Role Description 

The IT Security Officer serves as the process and policy owner related to the availability, integrity and confidentiality of customer, business partner, employee and business information/data. A key element of the IT Security Officer’s role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. 

Key functions 

• Security Operations:
• own  and drive security education and security awareness programs across the organization
• own, drive and continuously improve security processes, policies and tooling 
• real-time analysis and triage of security threats and incidents
• proactively educate and inform executive management of developing security threats
• develop, implement and execute a strategic, comprehensive enterprise information security and IT risk management program 

• Application Security:
• introduce application and infrastructure security monitoring processes and tooling 
• design and manage and run application and infrastructure security testing (internally and with 3rd parties)

• Security governance: 
• make sure that security related initiatives are understood and funded 
• lead and drive future company security certification programs 
• represent the company security in front of technology partners 
• conduct internal technical and organizational audits 
• manage and support external audits 
• manage, handling and resolve security incident response cases

• degree in business administration or a technology-related field required 
• 5+ years of hands-on IT security experience 
• experience in risk management, information security and IT security
• knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST
• knowledge of PCI-DSS requirements for merchants working with BSP supervised financial institutions 
• excellent written and verbal communication skills and high level of personal integrity and empathy 
• innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• experience with contract and vendor negotiations and management including managed services