Senior Cloud Security & Incident Response Lead

Bank of the Philippine Islands (BPI); Manila; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Bank of the Philippine Islands (BPI) seeks an experienced Cloud Security Controls lead to oversee and strengthen cybersecurity operations across the Bank, including threat management, IAM, DLP, and network security. You will guide risk assessments and drive improvements in security posture.

You will collaborate with engineering and infrastructure teams to implement controls, manage incidents, and ensure regulatory compliance with ISO 27001 and NIST.

Qualifications

• Bachelor’s degree in a relevant field and 8+ years of cybersecurity operations experience.
• Proven experience leading security initiatives and projects.
• Strong knowledge of Threat & Vulnerability Management, IAM, PAM, DLP, Network Security, and incident response.

Responsibilities

• Lead delivery and continuous improvement of cybersecurity services (Threat & Vulnerability Management, PAM, IAM, DLP, Network Security, Penetration Testing).
• Manage security incident investigations, remediation activities, root-cause analysis, and response actions.
• Conduct security risk assessments for IT initiatives and ensure regulatory compliance.
• Drive strategic security improvements and collaborate with engineering and technology teams.
• Optimize security processes and promote cross-functional collaboration.

Skills

Threat & Vulnerability Management

IAM

Privileged Access Management

DLP

Network Security

Penetration Testing

Security Incident Response

ISO 27001

NIST

Regulatory frameworks

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field

Tools

ServiceNow Security Operations

Cloud security platforms

Job description

Bank of the Philippine Islands (BPI) seeks an experienced Cloud Security Controls lead to oversee and strengthen cybersecurity operations across the Bank, including threat management, IAM, DLP, and network security. You will guide risk assessments and drive improvements in security posture.

You will collaborate with engineering and infrastructure teams to implement controls, manage incidents, and ensure regulatory compliance with ISO 27001 and NIST.