Information Security Engineer

Data Analytics Ventures, Inc. | Go Rewards; Pasig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Data Analytics Ventures, Inc. (DAVI) is seeking a Cybersecurity Architect to protect the data and operations behind Go Rewards, Cebu Pacific, and partner networks.

You will design and enforce encryption, IAM, WAF, and EDR/MDR controls across cloud and on‑premises systems. You will collaborate with Engineering, Legal, and Compliance to ensure ISO 27001, NIST, and Philippine data privacy requirements are met while guiding vendors and internal teams on secure SDLC practices and emerging

Qualifications

• 5 to 8+ years in information security or related role with hands-on infra and app security.
• Depth across IAM, WAF, encryption, EDR/MDR, vulnerability management and secure SDLC.
• Strong understanding of ISO 27001, NIST CSF, and Philippine data privacy laws.
• Experience securing cloud environments (AWS/Azure/Google) and on‑premise systems.
• Ability to assess third‑party security postures and govern vendor security.

Responsibilities

• Security Architecture and Implementation: encryption, IAM, WAF, IDS across loyalty infra.
• Embed secure SDLC practices across Engineering; ensure security is built in.
• Harden configurations across cloud and on‑prem environments per standards.
• Threat Detection and Incident Response: operate EDR/MDR; coordinate vulnerability scanning and remediation.
• Own incident response: triage, containment, root cause analysis, post‑incident docs.
• Compliance and Audit Readiness: maintain ISO 27001, NIST, PH privacy readiness; audit trails.
• Vendor and Managed Services Governance: review vendor security, enforce security obligations.
• Enterprise AI governance: ensure AI tools meet security and privacy standards.
• Security Awareness: collaborate across Tech, Product, Data, Legal; run security programs.

Skills

Security architecture

IAM

WAF

EDR/MDR

Vulnerability management

Secure SDLC

Cloud security

ISO 27001

NIST CSF

PH data privacy law

Vendor governance

Risk assessment

Tools

AWS

Azure

Google Cloud

Job description

What can you tell your friends when they ask what you do?

I'm the person making sure that when millions of Filipinos use Go Rewards -- earning points at Robinsons, booking flights on Cebu Pacific, redeeming rewards through partner banks -- their data and transactions are protected. I own DAVI's security posture end-to-end: from the tools that detect threats in real time, to the policies that keep us audit-ready, to the vendor relationships that extend our security coverage across a growing coalition of partners. In a business built on member trust and partner confidence, I'm one of the people making sure that trust is never the thing that breaks.

Responsibilities – How will you do this?

Security Architecture and Implementation

• Implement and maintain encryption, identity and access management (IAM), web application firewalls (WAF), and intrusion detection systems across all loyalty infrastructure and digital channels
• Support the design and enforcement of secure software development lifecycle (SDLC) practices across Engineering, ensuring security is embedded in how the team builds, not bolted on after
• Assess and harden security configurations across cloud environments (AWS, Azure, Google) and on-premises systems in alignment with architecture standards

Threat Detection and Incident Response

• Manage and operate endpoint detection and response (EDR) and managed detection and response (MDR) tooling across DAVI's device and infrastructure estate
• Lead vulnerability scanning, penetration testing coordination, and remediation tracking across all systems and platforms
• Own incident response coordination: triage, containment, root cause analysis, and post-incident documentation for security events

Compliance and Audit Readiness

• Maintain DAVI's readiness against ISO 27001, NIST, and relevant Philippine data privacy and cybersecurity regulations
• Prepare and maintain security documentation, audit trails, and evidence packages required for internal and external audits
• Monitor regulatory developments in data privacy and cybersecurity relevant to the loyalty and financial services ecosystem and translate these into actionable policy updates

Vendor and Managed Services Governance

• Govern security-related vendor relationships, including the JGCIT-managed security scope under the TAP managed services contract
• Review and assess third-party vendor security postures as part of partner onboarding and integration reviews
• Ensure contractual security obligations with partners and vendors are defined, tracked, and enforced

Enterprise AI and Emerging Technology Governance

• Support the development and enforcement of Enterprise AI governance policies, ensuring AI tools and models adopted across DAVI meet security and data privacy standards
• Assess the security implications of new technologies, platforms, and integrations before they are deployed into production
• Work with the Head of Architecture, Platforms, and Security to translate emerging threat intelligence into updated security controls and standards

Security Awareness and Cross-Functional Collaboration

• Partner with Technology, Product, Data, and Legal to ensure security requirements are embedded into project delivery, not raised as blockers at the end
• Conduct security awareness initiatives across the organization, building a culture where security is everyone's baseline responsibility
• Provide clear, non-technical security guidance to business stakeholders when evaluating new tools, processes, or partner integrations

To be successful, you’ll need

• 5 to 8+ years of experience in information security, cybersecurity engineering, or a closely related technical security role -- with hands‑on exposure to both infrastructure and application security in a complex, multi-system environment.
• Proven technical depth across core security domains: IAM, WAF, encryption, EDR/MDR, vulnerability management, and secure SDLC -- with the ability to operate these tools independently, not just oversee vendors who do.
• Solid working knowledge of ISO 27001, NIST Cybersecurity Framework, and Philippine data privacy regulations (Data Privacy Act of 2012) -- including what audit readiness actually looks like in practice, not just on paper.
• Experience managing cloud security across at least one major provider (AWS, Azure, or Google Cloud), including security configuration, access controls, and monitoring.
• Ability to assess and govern third‑party and vendor security postures -- including reviewing contracts, conducting security assessments, and holding vendors accountable to defined standards.
• Strong analytical and risk judgment: able to prioritize threats by actual business impact, communicate risk clearly to non‑technical stakeholders, and make defensible security decisions under time pressure.
• Familiarity with AI governance frameworks and the security implications of enterprise AI adoption -- including data handling, model access controls, and privacy risk -- is a strong advantage given DAVI's direction.

Our Core Values

At DAVI, we are guided by three core values:

• Entrepreneurial Mindset – Growth-oriented, customer-focused, and driven to innovate.
• Stewardship – Takes ownership, protects resources, and promotes sustainable decisions.
• Integrity – Acts with honesty, fairness, and a commitment to doing what is right.

About Data Analytics Ventures Inc. (DAVI)

Data Analytics Ventures, Inc. (DAVI) is the Gokongwei Group's loyalty and data analytics company. Aside from managing Go Rewards, the loyalty program of the Gokongwei Group which includes Cebu Pacific, GoTyme and Robinsons Retail Holdings, DAVI also plays a pivotal role in driving consumer insights through data science. This combination enables DAVI to create a loyalty program that delivers on rewarding experiences and harnessing data to fuel business growth.

At DAVI, data is the key to identifying customer patterns and insights. More than just crunching numbers amidst evolving market landscapes, the company aims for meaningful engagement and sustainable growth that will accelerate discovery and action for businesses.

DAVI helps businesses get a deeper understanding of their brand and category performance. The company's insights help businesses to determine growth drivers and opportunities, improve decisions and calibrate business objectives and actions.

DAVI advocates a culture of excellence and teamwork. Everyone is expected to be the very best at what they do and serve as mentors to their colleagues. We believe in building a trusted environment that encourages open dialogue and constructive conflict, where individuals are humble and hungry to learn from each other. We expect excellence of ourselves and others and together, we make excellence contagious.

DAVI offers its employees the chance to be part of the wave of the future as the data industry continues to evolve rapidly. They are empowered to chart the trajectory of their career and have access to programs that help them continuously upskill. As such, the company seeks people who are passionate about uncovering the value and opportunities behind data.

Privacy Notice

DAVI values your privacy. Personal data collected as part of your application will be processed in accordance with this Privacy Notice: https://www.davi.com.ph/EECG-privacy-notice