Senior Data Security & Threat Management Lead

Bank of the Philippine Islands (BPI); Makati; On-site; PHP 2,000,000 - 3,500,000; Full time

Job summary

The Data Security team at Bank of the Philippine Islands (BPI) oversees cybersecurity operations across the bank, including threat management, IAM, DLP, and network security. The role leads risk mitigation, regulatory compliance, and continuous improvement to strengthen the bank’s security posture.

Responsibilities include investigating incidents, conducting risk assessments, and driving strategic security projects with cross-functional teams to enhance operational effectiveness and resilience

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or a related field.
• 8+ years of experience in cybersecurity operations with leadership responsibilities.
• Strong knowledge of Threat & Vulnerability Management, IAM, PAM, DLP, Network Security, Penetration Testing, and incident response.
• Experience with cloud security, security operations platforms, regulatory frameworks, and ISO 27001/NIST.
• Excellent analytical, risk assessment, stakeholder management, and leadership skills.

Responsibilities

• Manage security incident investigations, remediation actions, root cause analysis, and response to threats and vulnerabilities.
• Conduct security risk assessments for IT initiatives, infrastructure changes, systems, and services with compliance recommendations.
• Drive strategic security improvement initiatives and collaborate with engineering, infrastructure, and technology teams.
• Optimize cybersecurity processes, controls, and workflows while promoting cross-functional collaboration to improve resilience.

Skills

Threat & Vulnerability Management

IAM

Privileged Access Management

DLP

Network Security

Penetration Testing

Security Incident Response

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

ServiceNow Security Operations

Job description

The Data Security team at Bank of the Philippine Islands (BPI) oversees cybersecurity operations across the bank, including threat management, IAM, DLP, and network security. The role leads risk mitigation, regulatory compliance, and continuous improvement to strengthen the bank’s security posture.

Responsibilities include investigating incidents, conducting risk assessments, and driving strategic security projects with cross-functional teams to enhance operational effectiveness and resilience