Senior Cloud Security Manager

Manulife Financial; Philippines; Hybrid; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Hybrid work model

3x on-site per week

Night shift flexibility

Job summary

Manulife Financial in the Philippines is seeking a Senior Cloud Security Manager to join our Global Tech team. You will act as a technical lead for access control, cloud security engineering, and automation of secure-by-default patterns across platforms.

You will drive rollout strategy, coordinate with North America teams, and mentor engineers while balancing security with operational efficiency. The role requires strong automation skills and experience with AWS, Azure, and IaC.

Qualifications

• Bachelor’s degree in computer science or IT or equivalent.
• 5+ years in cloud engineering, platform engineering, DevOps, or cloud security roles.
• Strong understanding of cloud platforms (AWS, Azure, AliCloud) and IAM/RBAC models.
• Security mindset with knowledge of access management frameworks and least privilege.
• Automation-first mindset with scripts and automation tools.
• Proficiency with Azure, Terraform, GitHub, GitHub Actions, Python, JIRA, Confluence.
• Solid teamwork, CI/CD, and IaC understanding (Terraform).
• Ability to work with engineering teams and balance security with operations.
• Experience designing automation solutions; scripting (Python, PowerShell) helpful.
• Excellent communication and stakeholder management across regions.

Responsibilities

• Act as SME in access control and cloud-native patterns; guide least privilege and RBAC design.
• Own intake channels for access requests and exceptions; ensure consistent decision-making.
• Lead automated access review rollout; align with the standard access model and controls.
• Drive adoption across engineering teams; integrate new approval processes into workflows.
• Lead technical briefings, workshops, and demos with North America teams.
• Define rollout strategy; introduce soft gate and transition to hard enforcement.
• Collaborate with platform engineers to balance security with operational efficiency.
• Define adoption metrics; guide teams to meet automation prerequisites.
• Post-adoption, manage ongoing operation and handle exceptions with rationale and traceability.

Skills

Access control

RBAC design

Cloud platforms

Automation

CI/CD pipelines

Python scripting

DevOps tools

Communication

Technical leadership

Education

Bachelor's degree in computer science or information technology

Tools

Azure

Terraform

GitHub

GitHub Actions

Python

JIRA

Confluence

Job description

We're looking for a Senior Cloud Security Manager to join our Global Tech team at MBPS. In this role, you will play a key, dynamic role in modernizing our customer interactions, helping to integrate analytics, business intelligence and AI into our decisions while providing actionable insights to stakeholders across the business.

Have the skills and experience for the job? Learn more about it below!

Position Responsibilities

• Act as a subject matter expert in access control and cloud-native patterns, providing guidance on topics such as least privilege, RBAC design, and secure-by-default configurations.

• Own the intake channels for access requests and exceptions, ensuring consistency in decision-making across automated and manual pathways, so that engineering teams experience a predictable and transparent approval model.

• Act as the technical lead for the automated access review rollout, advocating the standard access model and control requirements to engineering teams.

• Drive adoption and behavioral change across engineering teams, ensuring the new approval process integrates smoothly into existing development and operational workflows

• Lead technical briefings, workshops, and demos (including with North America teams) to explain the automation and pre-requisites (such as process changes) for achieving the automation.

• Define and lead the rollout strategy, including introducing the solution as a soft gate, monitoring impact, and transitioning to hard enforcement once adoption stabilizes

• Work closely with platform engineers to understand constraints, address pushbacks, and refine solutions that balance security requirements with operational efficiency

• Define and track adoption and automation success rate metrics, guide application teams to meet the pre-requisites for automation to increase success rate.

• Post completing adoption, own the ongoing operation such as handling exceptions that fall outside of automation, including understanding the technical need, identify alternatives, escalating violations or approving with rationale and traceability.

Required Qualifications

• Bachelor's degree in computer science, Information Technology or equivalent.

• 5+ years of experience in cloud engineering, platform engineering, DevOps, or cloud security engineering roles

• Strong understanding of cloud platforms (e.g., AWS, Azure, AliCloud), including core services, IAM/RBAC models, and infrastructure patterns

• Strong security mindset, Knowledge and understanding of any industry standard Access Management Framework, Principal of Least Privileged Access, Just-in-Time Access, RBAC and ABAC and Cloud Security

• Strong "automation-first" mindset. Writes automation(s) to streamline common tasks, tests, and workflows.

• Knowledge of following cloud platforms and Devop tools: Azure, Terraform, Github, GitHub Actions, Python, JIRA, Confluence, etc.

• Solid understanding of how engineering teams operate, including CI/CD pipelines, infrastructure-as-code (e.g., Terraform), and platform delivery models

• Proven ability to work with engineering teams, understand technical constraints, and drive practical solutions that balance security and operational needs

• Experience in designing or implementing automation solutions, with familiarity in scripting (e.g., Python, PowerShell) or working with automation tools

• Strong communication skills with the ability to explain technical concepts, lead discussions, and influence stakeholders across multiple teams and regions

• Ability to handle ambiguity and pushback constructively, and drive alignment through technical reasoning and collaboration

• Experience tracking and improving adoption and compliance metrics for technical processes or platforms

• Amenable to work UP Ayala Technohub (Quezon City)

• Amenable to work on a hybrid set-up (3x a week onsite)

• Amenable to work in any shift schedule assigned (ideally night shift; but flexible depending on business need)

Preferred Qualifications

• Self-driven, able to meet objectives with a minimal amount of managerial oversight/supervision.

• A team player who can interact with various internal functions such as business unit security officers, security engineers, reliability engineers, DevOps engineers.

• Advocate constant learning from both success and failure, and encourages openness to change and continuous improvement

When you join our team

• We'll empower you to learn and grow the career you want.

• We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

• As part of our global team, we'll support you in shaping the future you want to see.

マニュライフとジョン・ハンコックについて

マニュライフ・ファイナンシャル・コーポレーションは、「あなたの未来に、わかりやすさを」を提供する、国際的な大手金融サービスプロバイダーです。当社について詳しくは、 https://www.manulife.co.jp/lご覧ください。

マニュライフは機会均等を是とする雇用主です

マニュライフ/ジョン・ハンコックでは、多様性を受け入れます。私たちは、サービス提供先であるお客さまと同様に、多様な人材を引きつけ、育成し、定着させ、文化や個人の力を受け入れる包括的な職場環境を促進するよう努めています。当社は公正な採用、定着、昇進、報酬に努めています。当社のすべての慣行およびプログラムは、人種、祖先、出身地、肌の色、民族的出自、市民権、宗教または宗教的信念、信条、性別（妊娠および妊娠関連の状態を含む）、性的指向、遺伝的特徴、退役軍人としての地位、性自認、性に関する表明、年齢、婚姻状況、家族状況、障害、または適用法で保護されるその他の要因に対する一切の差別を行うことなく管理されます。

申請プロセスにおいて合理的配慮を要求するには、[e-mail]までご連絡をお願いします。

Working Arrangement

ハイブリッド勤務