Senior Cloud Security Manager

Manulife; Quezon City; Hybrid; PHP 3,000,000 - 4,600,000; Full time

Job summary

MBPS Global Tech is seeking a Senior Cloud Security Manager to lead access control design, implement automation for approvals, and guide secure-by-default configurations across cloud platforms.

You will drive adoption, coordinate with North America teams, and balance security with operational efficiency. The role is based at UP Ayala Technohub, Quezon City, with a hybrid setup (3 days onsite) and flexible shifts as needed.

Qualifications

• Bachelor's degree in computer science, Information Technology or equivalent.
• 7+ years of experience in cloud engineering, platform engineering, DevOps, or cloud security engineering roles
• 7+ years of experience in cloud platforms (AWS, Azure, AliCloud) including IAM/RBAC models
• Strong security mindset and knowledge of Access Management frameworks
• Automation-focused: writes automation to streamline tasks
• Experience with Terraform, GitHub, GitHub Actions, JIRA, Confluence
• Understanding of CI/CD pipelines, IaC and platform delivery models
• Proven ability to balance security and operational needs across teams
• Willingness to work at UP Ayala Technohub (Quezon City) and in a hybrid setup
• Willingness to work in night shifts if required

Responsibilities

• Act as an SME in access control and cloud-native patterns, guiding least privilege and secure-by-default configurations.
• Own intake channels for access requests and exceptions, ensuring consistent decision-making across automated and manual pathways.
• Lead automated access review rollout and advocate the standard access model to engineering teams.
• Drive adoption and behavioral change across engineering teams, integrating the new approval process into workflows.
• Lead technical briefings, workshops, and demos with North America teams on automation prerequisites.
• Define rollout strategy and transition to hard enforcement as adoption stabilizes.
• Collaborate with platform engineers to balance security with operational efficiency.
• Define and track adoption and automation success metrics; guide teams to meet prerequisites.

Skills

Cloud security

IAM/RBAC

Automation

Python

Terraform

CI/CD pipelines

Stakeholder communication

Education

Bachelor's degree in computer science

Tools

Terraform

Github

GitHub Actions

JIRA

Confluence

Job description

We2d 0 b Senior Cloud Security Manager to join our Global Tech team at MBPS. In this role, you will play a key, dynamic role in modernizing our customer interactions, helping to integrate analytics, business intelligence and AI into our decisions while providing actionable insights to stakeholders across the business.

Have the skills and experience for the job? Learn more about it below!

Position Responsibilities:

• Act as a subject matter expert in access control and cloud-native patterns, providing guidance on topics such as least privilege, RBAC design, and secure-by-default configurations.
• Own the intake channels for access requests and exceptions, ensuring consistency in decision-making across automated and manual pathways, so that engineering teams experience a predictable and transparent approval model.
• Act as the technical lead for the automated access review rollout, advocating the standard access model and control requirements to engineering teams.
• Drive adoption and behavioral change across engineering teams, ensuring the new approval process integrates smoothly into existing development and operational workflows
• Lead technical briefings, workshops, and demos (including with North America teams) to explain the automation and pre-requisites (such as process changes) for achieving the automation.
• Define and lead the rollout strategy, including introducing the solution as a soft gate, monitoring impact, and transitioning to hard enforcement once adoption stabilizes
• Work closely with platform engineers to understand constraints, address pushbacks, and refine solutions that balance security requirements with operational efficiency
• Define and track adoption and automation success rate metrics, guide application teams to meet the pre-requisites for automation to increase success rate.
• Post completing adoption, own the ongoing operation such as handling exceptions that fall outside of automation, including understanding the technical need, identify alternatives, escalating violations or approving with rationale and traceability.

Required Qualifications:

• Bachelors degree in computer science, Information Technology or equivalent.
• 7+ years of experience in cloud engineering, platform engineering, DevOps, or cloud security engineering roles
• 7+ years of experience in cloud platforms (e.g., AWS, Azure, AliCloud), including core services, IAM/RBAC models, and infrastructure patterns
• Strong security mindset, Knowledge and understanding of any industry standard Access Management Framework, Principal of Least Privileged Access, Just-in-Time Access, RBAC and ABAC and Cloud Security
• Strong “automation-first” mindset. Writes automation(s) to streamline common tasks, tests, and workflows.
• Experienced on the following cloud platforms and Devop tools: Azure, Terraform, Github, GitHub Actions, Python, JIRA, Confluence, etc.
• Solid understanding of how engineering teams operate, including CI/CD pipelines, infrastructure-as-code (e.g., Terraform), and platform delivery models
• Proven ability to work with engineering teams, understand technical constraints, and drive practical solutions that balance security and operational needs
• Experience in designing or implementing automation solutions, with familiarity in scripting (e.g., Python, PowerShell) or working with automation tools
• Strong communication skills with the ability to explain technical concepts, lead discussions, and influence stakeholders across multiple teams and regions
• Ability to handle ambiguity and pushback constructively, and drive alignment through technical reasoning and collaboration
• Experience tracking and improving adoption and compliance metrics for technical processes or platforms
• Amenable to work UP Ayala Technohub (Quezon City)
• Amenable to work on a hybrid set-up (3x a week onsite)
• Amenable to work in any shift schedule assigned (ideally night shift; but flexible depending on business need)

Preferred Qualifications:

• Self-driven, able to meet objectives with a minimal amount of managerial oversight/supervision.
• A team player who can interact with various internal functions such as business unit security officers, security engineers, reliability engineers, DevOps engineers.
• Advocate constant learning from both success and failure, and encourages openness to change and continuous improvement