Cybersecurity Domain Lead

2GO Group; Philippines; On-site; PHP 2,000,000 - 3,800,000; Full time

Benefits offered by this job

Competitive compensation

Performance bonuses

Incentives

Travel perks

Health and wellness programs

Job summary

2GO Group is seeking a Senior Cybersecurity Lead to own the defense strategy and execution with no direct reports, influencing internal IT teams to implement security initiatives. You will translate enterprise-wide mandates from SMIC into practical, company-specific solutions and bridge strategy and execution at all times.

The role requires 7–10 years in IT and cybersecurity, including 3 years in management, and a strong foundation in security controls, incident response, and policy alignment.

Qualifications

• 7–10 years of IT and cybersecurity experience, including 3 years in a managerial capacity.
• Bachelor's or Master's degree in computer science, cybersecurity, or engineering.
• Certifications: CISM, CISSP.
• Strong ability to translate security policies into actionable plans.
• Excellent communication to coordinate with internal IT teams and HQ.

Responsibilities

• Translate cybersecurity mandates into company-level execution plans, defining requirements, timelines, owners, and deliverables.
• Drive technical security implementation across Infrastructure, Endpoint, and Application teams, creating technical requirements and coordinating execution.
• Validate cybersecurity control implementation and effectiveness through evidence-based checks.
• Lead cybersecurity incident triage and response, validating SOC alerts with business context and coordinating remediation.
• Identify, assess, and proactively manage cybersecurity gaps across systems, applications, data, and processes.
• Manage exceptions and escalations with SMIC, documenting gaps and proposing compensating controls.
• Strengthen threat and vulnerability detection through assessments and threat hunting across under-covered resources.

Skills

Cybersecurity leadership

Incident response

Vulnerability management

Threat hunting

Security architecture

Policy compliance

Documentation

Cross-functional liaison

Education

Bachelor's or Master's in Computer Science / Cybersecurity / Engineering

Job description

Here’s the difference you’ll make

You'll own the cybersecurity defense strategy and execution for the company, serving as the key cybersecurity lead with no direct reports. Instead, you'll influence and coordinate internal IT teams to execute technical security initiatives effectively.

You'll own the cybersecurity defense strategy and execution for the company, serving as the key cybersecurity lead with no direct reports. Instead, you'll influence and coordinate internal IT teams to execute technical security initiatives effectively. As part of the SM Investments (SMIC) Group, you'll leverage the group’s cybersecurity tools, policies, and 24/7 security monitoring while translating these enterprise-wide mandates into practical solutions that address our unique business and operational needs. Your core mission is to bridge strategy and execution—ensuring SMIC’s cybersecurity requirements are implemented, validated, and continuously strengthened within the company. You'll be accountable for cybersecurity execution, control validation, risk escalation, and serving as the primary liaison between the company and SMIC.

Your mission..

• Translate SMIC cybersecurity mandates into company-level execution plans , interpreting security policies and technical standards and defining clear requirements, timelines, owners, and deliverables.
• Drive technical security implementation across Infrastructure, Endpoint, and Application teams , creating detailed technical requirements/tickets, coordinating execution, tracking progress, removing blockers, and escalating delays or resource constraints.
• Validate cybersecurity control implementation and effectiveness through evidence-based checks, including patch compliance, endpoint security agent connectivity, vulnerability remediation, and adherence to required security standards.
• Lead cybersecurity incident triage and response , validating SMIC SOC alerts with company-specific business context, directing containment and remediation activities, and coordinating with technical teams through resolution.
• Identify, assess, and proactively manage cybersecurity gaps across company systems, applications, data, and processes—including technical, regulatory, operational, and resource gaps,and develop practical remediation or compensating controls.
• Manage exceptions and escalations with SMIC , documenting control gaps, assessing business and technical impact, proposing data-backed compensating controls or alternative solutions, and securing formal resolution or exception approval.
• Strengthen company-level threat and vulnerability detection , conducting vulnerability assessments and threat hunting across resources not fully covered by SMIC tools, monitoring logs and reports for anomalies, and providing company-specific context to SMIC’s global security operations.

You’ll thrive in this role if you..

• A bachelor’s or master’s degree in computer science, cybersecurity, or engineering.
• Solid technical understanding of local IT infrastructure (servers, networks, endpoints, cloud).
• Experience implementing security controls (patching, antivirus, access management, vulnerability and penetration testing, forensic).
• Ability to read and understand security alerts and logs
• Strong documentation skills – you will write gap reports, exception requests, and local runbooks.
• Excellent communication – you must confidently challenge HQ when needed, while maintaining a collaborative relationship.

Experience

• 7 to 10 years of experience in IT and cybersecurity, which includes 3 years in managerial capacity

Nice-to-Have

• Experience working in a subsidiary or multi-national company.
• Knowledge of local data protection regulations.
• Certifications: CISM (Certified Information Security Manager), CISSP(Certified Information Security Systems Security Professional)

What’s In It For You At 2GO..

• Own enterprise impact. You are trusted to influence decisions and enable the business to perform at its best.
• Grow in a valued community. You work in a culture that listens, collaborates, and invests in your long-term success.
• Excel through expertise. You are empowered and recognized for delivering high standards and smart solutions.
• Be recognized and feel valued—at work and beyond. Receive and enjoy competitive compensation, performance bonuses, incentives, travel perks, Day 1 access to health and wellness programs and paid time off designed to support your well-being.