Senior Manager, Digital Security

AIA Digital+ Philippines; Makati; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

AIA Digital+ Philippines in Makati, Philippines seeks an experienced leader to drive Application Identity and Access Management. The role plans and delivers roadmaps for control and process enhancements to elevate IAM capabilities.

Responsibilities include onboarding applications to Sailpoint, enforcing ACM patterns, and establishing governance, recertification, and SOD controls, with cross-BU collaboration and vendor engagement.

Qualifications

• 8+ years of relevant professional experience within Information Security, Technology Risk, or Governance with strong background in Identity and Access.
• Exceptional organisational and prioritisation skills, with proven ability to rationalise competing demands and manage multiple workstreams effectively.
• Strong presentation and briefing capabilities, with demonstrated experience engaging senior executive audiences.
• Proven ability to translate complex and technical concepts into clear, concise, and actionable messages for diverse audiences, both verbally and in writing.
• Sound judgement and decision‑making ability, including experience evaluating trade‑offs, assessing risk versus benefit, and recommending appropriate courses of action.

Responsibilities

• Drive onboarding rate of applications to Sailpoint. Improve speed while simplifying and reducing cost/overhead.
• Enforce integration patterns to improve day 1 application connectivity.
• Implement a tool and related processes for storing, reviewing, recertifying ACM to allow dependant processes to operate according to standard and regulatory requirements
• Ensure processes and technology are in place to identify, control and report on all types of application PID.
• Define and run processes and technology to allow clear and informed access reviews for all onboarded applications.
• Coach BUs in defining SOD, build technology and processes to enforce for existing and new access.
• Identify and document indicators across the application IAM space to ensure compliance and visibility within teams and BU activities.
• Communicates and coordinates within GIS-IAM to ensure initiatives, BAU and reporting are aligned; reports to senior audiences.
• Communicate and negotiate professionally with vendors and service providers.
• Lead a team of 10-15 initial members and collaborate across BUs.

Skills

Identity and Access

Application controls

Governance

Information Security

Job description

Position Objective:

Lead the daily operations for Application Identity and Access Management.

Plan and deliver the roadmap of control and process enhancements to take Application IAM to the next level

Roles and Responsibilities:

Application onboarding

• Drive onboarding rate of applications to Sailpoint. Improve speed while simplifying and reducing cost/overhead.
• Enforce integration patterns to improve day 1 application connectivity

Access Control Matrix

• Implement a tool and related processes for storing, reviewing, recertifying ACM to allow dependant processes to operate according to standard and regulatory requirements

Application privileged ID controls

• Ensure processes and technology are in place to identify, control and report on all types of application PID.

Recertification

• Define and run processes and technology to allow clear and informed access reviews for all onboarded applications.

SOD / Toxic Access

• Coach BUs in defining SOD, build technology an dprocesses to enforce fotr existing and new access.

Application IAM Governance

• Identify and document indicators across the application IAM space to ensure confliance and visivility both within the teams activities and within BU activities.

Financial and Non-Financial Measures:

Significant increase in documented controls over application IAM and governance/reporting of the operation of those controls

Reporting Structure and Supervisory / Managerial Responsibilities:

• 10-15 initial team members
• Communicates and coordinates within GIS-IAM to ensure initiatives, BAU and reporting are aligned. Communicates regularly across BUs with application owners, local application administrators and architecture teams as well as local information security. Able to report to senior group audiences on application IAM concepts.
• Required to communicate and negotiate professionally with vendors and service providers.

Minimum Job Requirements:

• 8+ years of relevant professional experience within Information Security, Technology Risk, or Governance, with a strong background in Identity and Access and application controls.
• Exceptional organisational and prioritisation skills, with proven ability to rationalise competing demands and manage multiple workstreams effectively.
• Strong presentation and briefing capabilities, with demonstrated experience engaging senior executive audiences.
• Proven ability to translate complex and technical concepts into clear, concise, and actionable messages for diverse audiences, both verbally and in writing.
• Sound judgement and decision‑making ability, including experience evaluating trade‑offs, assessing risk versus benefit, and recommending appropriate courses of action.

Work Setup: Hybrid, 4x RTO

Loc: Makati