Senior Endpoint Security and Threat Defense Lead

Bank of the Philippine Islands (BPI); Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

Bank of the Philippine Islands (BPI) is seeking an experienced End Point Security Leader to oversee cybersecurity operations, threat and vulnerability management, IAM, data loss prevention, network security, and penetration testing across the Bank.

You will drive incident response, risk assessments, and strategic security projects, collaborating with engineering, infrastructure, and technology teams to enhance security capabilities and regulatory compliance with ISO 27001 and NIST frameworks.

Qualifications

• Bachelor’s degree or higher in a relevant field.
• 8+ years of experience in cybersecurity operations or information security.
• Strong knowledge of Threat & Vulnerability Management, IAM, PAM, DLP, Network Security, and Penetration Testing.

Responsibilities

• Lead the delivery and continuous improvement of cybersecurity services across the bank.
• Manage security incident investigations, remediation activities, and root cause analysis.
• Conduct security risk assessments for IT initiatives and infrastructure changes.
• Drive strategic security improvement initiatives with engineering and infrastructure teams.
• Optimize cybersecurity processes and controls to strengthen resilience.

Skills

Threat & Vulnerability Management

Identity & Access Management

Privileged Access Management

Data Loss Prevention

Network Security

Penetration Testing

Security Incident Response

Cloud Security

Regulatory Compliance

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering

Tools

ServiceNow Security Operations

Job description

Bank of the Philippine Islands (BPI) is seeking an experienced End Point Security Leader to oversee cybersecurity operations, threat and vulnerability management, IAM, data loss prevention, network security, and penetration testing across the Bank.

You will drive incident response, risk assessments, and strategic security projects, collaborating with engineering, infrastructure, and technology teams to enhance security capabilities and regulatory compliance with ISO 27001 and NIST frameworks.