Cybersecurity Lead | MGEN

Meralco PowerGen (MGEN); Pasig; On-site; PHP 600,000 - 900,000; Full time

Job summary

Meralco PowerGen Corporation (MGEN) is seeking a Cybersecurity Analyst to safeguard IT and OT environments and protect power generation plants from cyber threats. The role focuses on implementing and operating security measures across corporate IT and OT systems, ensuring confidentiality, integrity, and availability.

Responsibilities include monitoring security events, assisting in incident response, vulnerability management, and maintaining security tools across both IT and OT domains.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field.
• Certifications such as CompTIA Security+, CEH, GICSP, or equivalent preferred.

Responsibilities

• Security Operations & Monitoring across IT and OT environments.
• Assist in incident response activities: triage, investigation, containment, and reporting.
• Support vulnerability scanning, patch management, and remediation tracking.
• Operate and maintain security solutions such as firewalls, IDS/IPS, SIEM, EDR, and OT-focused monitoring tools.
• Assist in reviewing secure configurations for IT/OT systems and new projects.
• Provide support during penetration tests and risk assessments.
• Help prepare documentation for IT/OT cybersecurity audits.
• Contribute to regular cybersecurity reports for internal stakeholders.
• Support cybersecurity awareness initiatives for employees through campaigns and learning sessions.

Skills

Network security

Endpoint security

Application security

SIEM

EDR

IAM

Cloud security

Education

Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field

Tools

Firewalls

IDS/IPS

SIEM

EDR

Vulnerability scanning tools

OT monitoring tools

Job description

The Cybersecurity Analyst will help safeguard Meralco PowerGen Corporation (MGEN), its subsidiaries, and its power generation plants against evolving cyber threats. This role supports the implementation and operation of security measures across both corporate IT and operational technology (OT) environments, with a focus on maintaining system confidentiality, integrity, and availability.

Key Responsibilities

• Security Operations & Monitoring
• Monitor and analyze security events and alerts across IT and OT environments (including SCADA and IC s systems).
• Assist in incident response activities: triage, investigation, containment, and reporting.
• Support vulnerability scanning, patch management, and remediation tracking.
• Security Tools & Technology
• Operate and maintain security solutions such as firewalls, IDS/IPS, SIEM, EDR, and OT-focused monitoring tools.
• Assist in reviewing secure configurations for IT/OT systems and new projects, including renewable energy facilities.
• Provide support during penetration tests and risk assessments.
• Compliance & Documentation
• Assist in ensuring compliance with Philippine regulations (ERC, DOE), data privacy laws, and international standards (ISO 27001, NIST).
• Help prepare documentation for IT/OT cybersecurity audits.
• Contribute to regular cybersecurity reports for internal stakeholders.
• Awareness & Training
• Support cybersecurity awareness initiatives for employees through campaigns and learning sessions.
• Provide technical support to plant operations teams on OT and ICs security best practices.
• Collaboration & Support
• Work closely with IT, OT, and plant operations teams to integrate security measures into daily operations.
• Coordinate with vendors, consultants, and managed service providers for technical assistance.

Education & Certifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field.
• Certifications such as CompTIA Security+, CEH, GICSP, or equivalent preferred.

Experience

• Around 3 years of experience in IT or cybersecurity (experience in energy/utilities or OT security a plus).
• Hands-on experience in security monitoring, incident response, or vulnerability management.

Technical Skills

• Knowledge of network, endpoint, and application security fundamentals.
• Familiarity with SIEM, EDR, IAM, and cloud security solutions.
• Understanding of common frameworks (e.g., NIST, ISO 27001) advantageous.

Behavioral Competencies

• Strong analytical and problem-solving skills.
• Good communication and teamwork skills.
• Ability to prioritize and perform well under pressure.