Senior Manager

Maya Bank; Manila; On-site; PHP 2,000,000 - 3,500,000; Full time

Job summary

Maya Bank is seeking a Senior Infrastructure Security Manager to lead protection of cloud and on-premise infrastructure across production and corporate environments. You will drive security strategy, oversee tooling, IAM practices, and partner with technology teams to bake security into the development lifecycle.

You will mentor the Infrastructure Security team, conduct threat modeling, and enforce governance while driving proactive security improvements to strengthen trust and protection.

Qualifications

• Bachelor's degree in IT/CS or related field.
• Experience in Information Security Architecture.
• Proficiency with security tools and cloud environments.
• Strong networking knowledge.
• Experience with cloud security and compliance frameworks (AWS, PCI DSS, ISO 27001).
• Understanding of container security, Kubernetes, and microservices security.

Responsibilities

• Implement and optimize security tools and their rulesets.
• Partner with Tech and Product teams to embed security early in design and development.
• Conduct threat modeling and security design reviews for high-risk features.
• Provide guidance and best practices for securing infrastructure components.
• Lead, mentor, and develop Infrastructure Security team members.
• Participate in cross-functional security initiatives and incident response simulations.
• Enforce governance over product and service security.
• Continuously improve proactive security measures and security-by-design culture.

Skills

Infrastructure security

Cloud security

Security tooling

Threat modeling

Mentorship & comms

Education

Bachelor's in IT/CS

Tools

CNAPP

DLP

SIEM

Endpoint security

Job description

Overview:

We\'re looking for a Senior Infrastructure Security Manager to lead the protection of Maya\'s cloud and on-premise infrastructure across both production and corporate environments. You will drive infrastructure security strategy, oversee security tools and identity access management practices, and partner with technology teams to build security into every stage of the development lifecycle.

What you will be doing:

• Implement and optimize security tools and their corresponding rulesets.
• Partner with Technology and Product teams to embed infrastructure security early in the design and development process.
• Conduct threat modeling and security design reviews for high-risk product features.
• Provide guidance and best practices for securing the company\'s infrastructure components.
• Lead, mentor, and develop Infrastructure Security team members.
• Participate in cross-functional security initiatives and incident response simulations when required.
• Enforce strong governance over product and service security.
• Continuously improve proactive security measures to strengthen trust and protection.
• Foster a security-by-design culture and mentor engineers on security best practices.
• Ensure a scalable, efficient, and well-managed security framework.

Displayed Skill Mastery:

• Experience in Infrastructure Security or related Information Security domains.
• Advanced knowledge of cloud security.
• Proficiency with security technologies such as endpoint security tools, CNAPP, DLP, SIEM, vulnerability management tools, and related platforms.
• Deep understanding of modern infrastructure threats and vulnerabilities.
• Experience with threat modeling frameworks such as STRIDE and PASTA, and secure design patterns.
• Strong communication, collaboration, and mentorship skills.

What we are looking for:

• Bachelor\'s degree in Information Technology, Computer Science, or a related field.
• Practical experience in Information Security Architecture.
• Proficiency with security tools and cloud environments.
• Strong networking knowledge and skills.
• Experience with cloud security and compliance frameworks such as AWS, PCI DSS, and ISO 27001.
• Understanding of container security, Kubernetes, and microservices security.
• Familiarity with code review practices, threat modeling, and product-level risk analysis.