Cyber Security Manager (Online Gaming)

Sureste Properties Inc.; Parañaque; On-site; PHP 2,000,000 - 3,200,000; Full time

Job summary

Sureste Properties Inc. in Metro Manila seeks a Senior Information Security Leader to define and drive the cyber security strategy for online gaming platform and corporate environments.

You will oversee security operations, threat detection, incident response, and forensics, ensuring timely containment and resolution. Responsibilities include managing vulnerability programs, security architecture reviews, and deployment of SIEM/EDR/WAF/IDS/IPS/DLP.

Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or related field.
• 8+ years in information or cyber security; 3+ years in management.
• Experience in online gaming, fintech, or regulated industries preferred.
• Knowledge of ISO 27001, NIST CSF; regulatory compliance is essential.
• Certifications such as CISSP, CISM, CEH, or GIAC preferred.

Responsibilities

• Develop, implement, and maintain cyber security strategy and standards.
• Lead security operations, incident response, and forensics.
• Oversee vulnerability management across apps and infra.
• Conduct security architecture reviews and third-party assessments.
• Operate SIEM/EDR/WAF/IDS-IPS/DLP and evaluate new tools.
• Ensure PAGCOR, Data Privacy Act, PCI DSS, ISO 27001 compliance.
• Design and deliver security awareness programs.
• Mentor security team and coordinate with other teams.
• Manage third-party security vendors and SLAs.
• Maintain and test incident response plans and playbooks.
• Report security posture and risks to senior management.

Skills

Security leadership

Security operations

Vulnerability management

Threat monitoring

Incident response

Regulatory compliance

Vendor management

Stakeholder communication

Tabletop exercises

Education

Bachelor's degree in Computer Science / Information Security / Information Technology

Tools

SIEM

EDR

WAF

IDS/IPS

DLP

Job description

• Develop, implement, and maintain the cyber security strategy, policies, and standards covering the online gaming platform and corporate environments.


• Lead security operations, including threat monitoring, detection, incident response, and forensic investigation, ensuring incidents are contained and resolved within agreed timelines.


• Manage the vulnerability management program, including scanning, penetration testing, and remediation tracking across applications and infrastructure.


• Oversee security architecture reviews for new systems, platform integrations, and third-party service providers, including PAGCOR-mandated integrations.


• Operate and optimize security technologies such as SIEM, EDR, WAF, IDS/IPS, and DLP, evaluating new tools as the threat landscape evolves.


• Ensure compliance with regulatory and industry requirements, including PAGCOR, the Data Privacy Act, PCI DSS, and ISO 27001, supporting audits and certification activities.


• Design and deliver security awareness programs to strengthen the organization's security culture.


• Lead, mentor, and develop the security engineering and operations team, managing performance and capability development.


• Coordinate with GRC, IAM, network, server, and DevOps teams to embed security controls across systems and processes.


• Manage third-party security providers, including SOC, penetration testing, and threat intelligence vendors, against defined SLAs.


• Maintain and regularly test the incident response plan and supporting playbooks, including tabletop and simulation exercises.


• Report security posture, key risks, and incident metrics to senior management and recommend risk treatment actions.

Qualifications and Requirements

• Education: Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.


• Experience: 8+ years in information or cyber security, with at least 3 years in a managerial or team lead role, ideally in online gaming, fintech, or other regulated, transaction-heavy industries.


• Skills & Knowledge: Deep knowledge of security frameworks (ISO 27001, NIST CSF), security operations (SIEM, EDR, WAF, IDS/IPS), cloud and network security, incident response, vulnerability management, and regulatory compliance (PAGCOR, Data Privacy Act, PCI DSS); strong leadership, vendor management, and stakeholder communication skills.


• Certifications (good to have): CISSP, CISM, CEH, or GIAC certifications preferred.