DATA SECURITY

Bank of the Philippine Islands (BPI); Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

Bank of the Philippine Islands (BPI) is seeking a Senior Data Security professional to oversee and enhance cybersecurity operations across the bank, including threat and vulnerability management, IAM, and data loss prevention. This role drives risk mitigation, compliance, and continuous improvement initiatives to strengthen the bank's cybersecurity posture.

The successful candidate will lead security incident investigations, perform risk assessments for IT initiatives, and collaborate with

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 8+ years of experience in cybersecurity operations, information security, vulnerability management, or related domains.
• Strong knowledge of cybersecurity disciplines such as Threat & Vulnerability Management, IAM, Privileged Access Management, DLP, Network Security, Penetration Testing, and incident response.
• Experience with cloud security, security operations platforms, regulatory frameworks and standards such as ISO 27001 and NIST.
• Strong analytical, risk assessment, stakeholder management, communication, and leadership skills.

Responsibilities

• Lead the delivery and continuous improvement of cybersecurity services across multiple domains including Threat & Vulnerability Management, IAM, DLP, and Penetration Testing.
• Manage security incident investigations, remediation, root cause analysis, and response actions to address threats and vulnerabilities.
• Conduct security risk assessments for IT initiatives, infrastructure changes, systems, and services and ensure compliance with security standards and regulatory requirements.
• Drive strategic security improvement initiatives and cybersecurity projects collaborating with engineering, infrastructure, and technology teams.
• Optimize cybersecurity processes and workflows while promoting cross-functional collaboration to improve operational efficiency.

Skills

Threat Mgmt

Vulnerability Mgmt

IAM

Privileged Access

Data Loss Prevention

Network Security

Education

Bachelor's degree in CS/IT/Cybersecurity/Engineering

Tools

ServiceNow Security Operations

Job description

Job Description:

DATA SECURITY Job Summary

The Data Security is responsible for overseeing and enhancing cybersecurity operations across the Bank, including threat and vulnerability management, privileged access management, identity and access management, data loss prevention, network security, and penetration testing. The role drives security operations excellence, risk mitigation, compliance adherence, and continuous improvement initiatives to strengthen the Bank's overall cybersecurity posture.

Responsibilities

• Lead the delivery and continuous improvement of cybersecurity services, including Threat & Vulnerability Management, Privileged Access Management, Identity & Access Management (IAM), Data Loss Prevention (DLP), Network Security, and Penetration Testing
• Manage security incident investigations, technical remediation activities, root cause analysis, and response actions to address cybersecurity threats and vulnerabilities
• Conduct security risk assessments for IT initiatives, infrastructure changes, systems, and services and provide recommendations to ensure compliance with security standards and regulatory requirements
• Drive strategic security improvement initiatives and cybersecurity projects, collaborating with engineering, infrastructure, and technology teams to enhance security capabilities and operational effectiveness
• Optimize cybersecurity processes, controls, and workflows, while promoting cross-functional collaboration to improve operational efficiency and strengthen organizational resilience

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field
• At least 8 years of experience in cybersecurity operations, information security, vulnerability management, or related domains, including experience leading security initiatives and projects
• Strong knowledge of cybersecurity disciplines such as Threat & Vulnerability Management, IAM, Privileged Access Management, DLP, Network Security, Penetration Testing, and security incident response
• Experience with cloud security, security operations platforms, ServiceNow Security Operations, regulatory frameworks, and industry standards such as ISO 27001 and NIST
• Strong analytical, risk assessment, stakeholder management, communication, and leadership skills, with the ability to drive cross-functional security programs and operational improvements