Cyber Security Manager

Solaire Resort; Parañaque; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Solaire Resort in the Philippines seeks an experienced information security leader to develop and maintain the cyber security strategy for online gaming and corporate environments. You will oversee threat monitoring, incident response, vulnerability management, and architecture reviews with external providers, ensuring compliance with PAGCOR, PCI DSS and ISO 27001.

You will guide a security team, coordinate with GRC/IAM/DevOps, and lead MFA, DLP, SIEM, WAF and related tooling to strengthen risk

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• 8+ years in information or cyber security, with at least 3 years in a managerial role.
• Experience in online gaming, fintech, or regulated, transaction-heavy industries preferred.
• Strong knowledge of ISO 27001, NIST CSF; security operations, cloud and network security.
• Certifications (good to have): CISSP, CISM, CEH, or GIAC.

Responsibilities

• Develop, implement and maintain cyber security strategy across platforms and environments.
• Lead security operations: threat monitoring, detection, incident response and forensics.
• Manage vulnerability program: scanning, pen-testing, remediation tracking.
• Oversee security architecture reviews for new systems and integrations.
• Operate and optimize SIEM/EDR/WAF/IDS-IPS/DLP; evaluate new tools as needed.
• Ensure compliance with PAGCOR, Data Privacy Act, PCI DSS and ISO 27001; support audits.
• Design and deliver security awareness programs and training.
• Lead and develop security engineering and operations teams.
• Coordinate with GRC, IAM, network, server, and DevOps teams to embed controls.
• Manage third-party security providers; monitor SLAs.
• Maintain incident response plan and run tabletop/simulation exercises.
• Report security posture, risks and metrics to senior management.

Skills

Security leadership

Vendor management

Stakeholder comms

Security operations

Regulatory compliance

Cloud and network security

Incident response

Vulnerability management

ISO 27001 / NIST CSF

PAGCOR compliance

Education

Bachelor's degree in Computer Science / IT / related field

Tools

SIEM

EDR

WAF

IDS/IPS

DLP

Job description

• Develop, implement, and maintain the cyber security strategy, policies, and standards covering the online gaming platform and corporate environments.
• Lead security operations, including threat monitoring, detection, incident response, and forensic investigation, ensuring incidents are contained and resolved within agreed timelines.
• Manage the vulnerability management program, including scanning, penetration testing, and remediation tracking across applications and infrastructure.
• Oversee security architecture reviews for new systems, platform integrations, and third-party service providers, including PAGCOR-mandated integrations.
• Operate and optimize security technologies such as SIEM, EDR, WAF, IDS/IPS, and DLP, evaluating new tools as the threat landscape evolves.
• Ensure compliance with regulatory and industry requirements, including PAGCOR, the Data Privacy Act, PCI DSS, and ISO 27001, supporting audits and certification activities.
• Design and deliver security awareness programs to strengthen the organization's security culture.
• Lead, mentor, and develop the security engineering and operations team, managing performance and capability development.
• Coordinate with GRC, IAM, network, server, and DevOps teams to embed security controls across systems and processes.
• Manage third-party security providers, including SOC, penetration testing, and threat intelligence vendors, against defined SLAs.
• Maintain and regularly test the incident response plan and supporting playbooks, including tabletop and simulation exercises.
• Report security posture, key risks, and incident metrics to senior management and recommend risk treatment actions.

Duties and Responsibilities

• Develop, implement, and maintain the cyber security strategy, policies, and standards covering the online gaming platform and corporate environments.
• Lead security operations, including threat monitoring, detection, incident response, and forensic investigation, ensuring incidents are contained and resolved within agreed timelines.
• Manage the vulnerability management program, including scanning, penetration testing, and remediation tracking across applications and infrastructure.
• Oversee security architecture reviews for new systems, platform integrations, and third-party service providers, including PAGCOR-mandated integrations.
• Operate and optimize security technologies such as SIEM, EDR, WAF, IDS/IPS, and DLP, evaluating new tools as the threat landscape evolves.
• Ensure compliance with regulatory and industry requirements, including PAGCOR, the Data Privacy Act, PCI DSS, and ISO 27001, supporting audits and certification activities.
• Design and deliver security awareness programs to strengthen the organization's security culture.
• Lead, mentor, and develop the security engineering and operations team, managing performance and capability development.
• Coordinate with GRC, IAM, network, server, and DevOps teams to embed security controls across systems and processes.
• Manage third-party security providers, including SOC, penetration testing, and threat intelligence vendors, against defined SLAs.
• Maintain and regularly test the incident response plan and supporting playbooks, including tabletop and simulation exercises.
• Report security posture, key risks, and incident metrics to senior management and recommend risk treatment actions.

Key Performance Indicators/Key Success Factors

• Mean time to detect and mean time to respond to security incidents.
• Percentage of critical and high vulnerabilities remediated within SLA.
• Closure rate of audit and compliance findings within committed dates.
• Security awareness training completion rate and phishing simulation results.
• Availability and coverage of security monitoring tools across critical systems.

Requirements

• Education: Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• Experience: 8+ years in information or cyber security, with at least 3 years in a managerial or team lead role, ideally in online gaming, fintech, or other regulated, transaction-heavy industries.
• Skills & Knowledge: Deep knowledge of security frameworks (ISO 27001, NIST CSF), security operations (SIEM, EDR, WAF, IDS/IPS), cloud and network security, incident response, vulnerability management, and regulatory compliance (PAGCOR, Data Privacy Act, PCI DSS); strong leadership, vendor management, and stakeholder communication skills.
• Certifications (good to have): CISSP, CISM, CEH, or GIAC certifications preferred.