Lead Cybersecurity Vulnerability & Risk Management

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,200,000 - 2,500,000; Full time

Job summary

SM Investments is seeking a Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to maintain a secure and compliant environment.

Key responsibilities include vulnerability scanning, onboarding, reporting, and remediation coordination, along with policy compliance and periodic security operations.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• At least 5 years of relevant experience.
• Strong understanding of security principles, vulnerability management, and risk analysis.
• Familiarity with VA tools, threat intelligence, and automation.
• Security certifications (CISSP, CISM, CEH) are a plus.

Responsibilities

• Lead vulnerability scanning and onboarding across infrastructure and applications.
• Analyze results, prepare reports, and coordinate timely remediation.
• Conduct policy compliance scans and maintain updated security records.
• Identify opportunities to automate security processes and run feasibility studies.
• Track threat intel, perform risk assessments for new apps/architecture, and provide mitigations.
• Manage security policies, onboarding, firewall reviews, and password audits.

Skills

Vulnerability management

Threat analysis

Automation

Policy compliance

Communication

Education

Bachelor's degree (CS/Info Security)

Tools

Snyk

WAF

Job description

SM Investments is seeking a Cyber Security Vulnerability professional to lead vulnerability management and remediation across the organization. You will drive assessments, automation, threat monitoring, and risk analysis to maintain a secure and compliant environment.

Key responsibilities include vulnerability scanning, onboarding, reporting, and remediation coordination, along with policy compliance and periodic security operations.