Business and Asset Management

MERALCO; Pasig; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Meralco is seeking a Business and Asset Management professional to lead the end-to-end cyber asset lifecycle across Meralco and its subsidiaries, embedding security controls at every stage. You will drive asset visibility, ownership models, and governance, collaborate with ICT/OT teams to ensure data integrity, and support vulnerability management and risk reduction initiatives.

Strong emphasis on cybersecurity maturity, policy enforcement, and cross‑unit coordination will shape success in this

Job description

Explore Fulfilling Careers at Meralco and take Part in #BuildingABrilliantFuture!

Why Join Us?

Come aboard so we can Build a Brilliant Future Together!

Meralco is more than a power distribution company. It is home to those who value innovation, dynamism, as well as development of one’s self and well-being. Meralco wholeheartedly believes in the significance of customer service, performance, accountability, integrity, and teamwork.

Meralco brings out the best in people by championing innovative solutions that move everyone towards a promising future together – for its employees, customers, community and country.

Join us at Meralco and experience a brilliant life.

Meralco is looking for a Business and Asset Management.

JOB SUMMARY

• Lead the design, definition, and end-to-end management of cyber asset lifecycle processes across Meralco and its subsidiaries. Drive cybersecurity maturity, policy enforcement, and risk alignment at the business unit and subsidiary level. Orchestrate process improvement, tool enablement, and consistent implementation of enterprise cybersecurity controls. Provide secondary support to the Third-Party Cyber Risk Management function for continuity as needed.

KEY RESPONSIBILITIES

Cyber Asset Management

• Design, define, and own the end-to-end cyber asset lifecycle management framework—from acquisition through disposal—embedding security controls at every stage.
• Establish and continuously improve a complete, accurate enterprise-wide inventory of digital and cyber assets, including subsidiaries.
• Define asset ownership, custodianship, classification, and prioritization models based on business criticality and data sensitivity.
• Introduce and drive adoption of enabling tools and processes that improve asset visibility, accuracy, and governance.
• Orchestrate collaboration with ICT and OT Network teams to ensure data integrity and consistency.
• Provide structured asset intelligence to support vulnerability management and risk reduction programs.
• Monitor critical asset utilization and drive optimization and risk mitigation actions.

Business Unit & Subsidiary Cybersecurity

• Design and lead initiatives that elevate cybersecurity maturity and compliance across business units and subsidiaries.
• Drive consistent enforcement and adoption of enterprise cybersecurity strategies, policies, standards, and controls.
• Serve as the primary interface between subsidiaries and the parent company on cybersecurity matters; orchestrate communication and coordinated action.
• Influence and enable standardization of tools, technologies, and security programs across the group, where applicable.
• Establish monitoring, reporting, and accountability mechanisms for subsidiary security posture and compliance.
• Engage and influence subsidiary stakeholders to address unique risks and embed a stronger security culture.
• Represent and escal ... etc

Third-Party Cyber Risk Support (Secondary)

• Provide continuity support to the TPCRM team. Assist with vendor assessments, contract reviews and management, and vendor incident management.