Senior Security Operations & Assurance Leader

City Developments Limited; Santo Niño 1st; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

City Developments Limited (CDL) is seeking a senior cybersecurity leader to drive policy development, oversee the SOC and coordinate risk assessments across the group and its subsidiaries. The role requires hands-on expertise in security engineering, incident response and vendor risk management, with a focus on safeguarding cloud, data and network environments.

The ideal candidate has extensive experience in SIEM, vulnerability management and application security testing, plus familiarity with

Qualifications

• Degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• At least 8–12 years in cybersecurity, security operations, security engineering, security assessment or IT risk.
• At least three years leading security analysts, managed security providers or technical security vendors.
• Experience leading internal security analysts and managing an external SOC, MSSP or security-testing partner.
• Strong knowledge of SIEM, incident response, vulnerability management, cloud security, IAM, endpoint, email, network and data security controls.
• Experience scoping and managing vulnerability assessments and penetration testing engagements, and validating findings and remediation plans.
• Exposure to application security testing (SAST/DAST, SCA) for web/mobile apps.
• Familiarity with ISO/IEC 27001, NIST CSF, PDPA, Cybersecurity Act, PCI DSS, SWIFT CSCF.
• CISSP, CISM, CRISC, CCSP or GIAC certifications preferred.

Responsibilities

• Develop, implement and review cybersecurity policies, standards and guidelines across the organisation and subsidiaries.
• Lead internal security analysts and manage the external Security Operations Centre provider for continuous monitoring and incident response.
• Operate, maintain and improve the group's security technology stack across endpoints, cloud, network and data environments.
• Lead vulnerability management, security assessments and risk reviews for critical systems and cloud services.
• Conduct due diligence for critical vendors and external partnerships, defining security assurance requirements.
• Provide technical security advice for new solutions and AI use cases, assessing data, access and integration risks.
• Support cybersecurity awareness training and phishing simulations across the organisation.

Skills

SIEM expertise

Incident response

Vulnerability management

Security monitoring

Threat detection

Cloud security

Identity management

Network security

Data security

Penetration testing

SAST/DAST

ISO 27001

NIST CSF

PCI DSS

CISSP/CISM/CRISC/CCSP

Education

Degree in Cybersecurity

Tools

SOC management tools

Job description

City Developments Limited (CDL) is seeking a senior cybersecurity leader to drive policy development, oversee the SOC and coordinate risk assessments across the group and its subsidiaries. The role requires hands-on expertise in security engineering, incident response and vendor risk management, with a focus on safeguarding cloud, data and network environments.

The ideal candidate has extensive experience in SIEM, vulnerability management and application security testing, plus familiarity with