Cyber Security Lead

Pepper Money UK; Taguig; Hybrid; PHP 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid work arrangement

Medical insurance cover

Life insurance

Health & wellbeing support

Training and growth opportunities

Job summary

Pepper Money UK is seeking a Cyber Security Lead based in Manila, adopting a hybrid pattern (3 days in the office, 2 days remote). You will head the day‑to‑day security operations, guiding a small cyber team and driving improvements to maintain a strong security posture across the business.

The role requires deep SOC/SIEM expertise, vulnerability management, incident response and threat research, with experience in MS Sentinel/Defender and agile project delivery.

Qualifications

• Degree educated and experienced in cyber security leadership.
• Desirable: AZ-500, SC-200, MS Intune, CISM, CISMP certifications.
• Proven ability to mentor and uplift two direct‑report analysts.

Responsibilities

• Lead daily SOC/SIEM operations, monitoring, investigations and reporting.
• Supervise two Cyber Analysts, overseeing workload and training.
• Own alert tuning, data ingestion and optimization of MS Sentinel/Defender.
• Lead vulnerability management and threat research activities.
• Maintain security policies, processes and documentation (SharePoint).
• Support audit readiness, risk/governance activities and incident response.
• Act as scrum master for BAU and project work within IT security.

Skills

SOC/SIEM operations

Vulnerability management

Incident response

Threat analysis

Risk management

Security governance

Agile / project management

Communication & documentation

Education

Bachelor's degree

Tools

MS Sentinel

Defender

SharePoint

CI/CD pipelines

Job description

Shift pattern:Mid-shift – 4pm MNL to 1am MNL

Working Model:Hybrid, 3 days in the office and 2 days working from home.

Working in our dynamic, successful IT team there has never been a better time to join Pepper Money, a specialist mortgage lender backed by a global financial institution offering first and second charge loans.

We really do believe that it's our people who are our main competitive advantage – the 'thing' that sets us apart from our competitors.

Our passion is to 'Help People Succeed'. This is at the heart of everything we do and includes our valued customers, intermediary brokers and partners as well as all of our fantastic colleagues.

We operate a hybrid working model, with a split of days being in the office and days being worked at home. Pepper Money has three offices across the UK and one office in Manila, where this role will be based.

What you will be doing

As our Cyber Security Lead, you'll be the subject matter expert leading the day‑to‑day running of our security operations.

You'll guide and support a small but impactful cyber team, including two Cyber Analysts who will report directly into you for workload supervision, ensuring they grow, develop and deliver high‑quality outputs. You'll also drive continuous improvement across our cyber capabilities and maintain a strong security posture across the business.

Key Responsibilities

• Lead daily SOC/SIEM operations, including monitoring, alert investigations, documentation and reporting.
• Supervise and develop two Cyber Analysts, overseeing their BAU workload, investigations and training.
• Act as the primary specialist for alert tuning, data ingestion and optimisation of MS Sentinel and Defender technologies.
• Lead OSINT, vulnerability management and threat research activity for the organisation.
• Maintain and update security policies, processes, standards, and SharePoint documentation.
• Support audit readiness, evidence management, and risk/governance activities across IT.
• Manage BAU and project workload as a team-scrum master.
• Review third‑party security due diligence and ensure follow‑ups and compliance.
• Promote security awareness and training across the organisation

What we are looking for

We're looking for a highly skilled cyber security professional with deep technical expertise and the leadership confidence to guide a small team. You'll bring a strong background in SOC/SIEM operations, vulnerability management, incident response and cyber governance, along with the ability to mentor and uplift the performance of two direct‑report Cyber Analysts.

Skills & Experience Required

• Extensive experience in cyber security roles with strong SOC/SIEM operational knowledge.
• Deep expertise in vulnerability management (CVE, CVSS, TTPs, MITRE ATT&CK / D3FEND).
• Strong capability in cyber intelligence, threat analysis, investigations and root cause analysis.
• Advanced understanding of risk management and stakeholder engagement.
• Strong knowledge of lifecycle risks for hardware, software and legacy platforms.
• Experience with SSDLC, CI/CD pipelines and DevSecOps principles.
• Strong awareness of security architecture best practice.
• Proven experience in Agile and project workload management.
• Excellent communication and documentation skills.
• Ability to work independently, use sound judgement, and effectively prioritise.

Qualifications

• Degree educated.
• Highly desirable: AZ‑500, SC‑200, MS Intune, CISM, CISMP.

Some of the benefits we provide are:

• Competitive salaries and bonus schemes
• Hybrid home/office working arrangements
• Regular training and opportunities to learn and grow
• Holiday leave plus bank holidays
• Medical insurance cover
• Life insurance
• Health and wellbeing support

In return for your commitment, you'll have the chance to develop your career in a dynamic environment, working alongside top talent and an exceptional leadership team. If you want to be involved in our exciting expansion plans and have the chance to really shape and influence the way the business grows, then we'd love to hear from you.

We also want our people to feel a sense of belonging at Pepper Money. We are committed to meeting our Diversity, Equality and Inclusion charter, further information can be found on the Careers section on our website.