Sr. Information Security Technical Lead

TrendMicro; Manila; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Trend Micro is seeking an experienced FedRAMP Operations Leader in the Philippines to act as the PH Technical Lead for incident management and compliance with FedRAMP standards. You will guide L1 SOC activities, coordinate with IT, security and development teams, and drive the FedRAMP lifecycle from assessments to reauthorizations.

You will work with TrendMicro VisionOne/CloudOne products for government SaaS offerings, maintain SSPs, and automate continuous monitoring while coordinating with

Qualifications

• 3+ years in information security or SOC in an enterprise setting.
• Strong knowledge of FedRAMP, NIST 800-53, RMF, FISMA frameworks.
• Experience with cloud services and government SaaS offerings.

Responsibilities

• Lead and manage FedRAMP operations as PH Technical Lead for incident management.
• Oversee security monitoring and compliance across the FedRAMP lifecycle.
• Develop and manage FedRAMP compliance program and SSP documentation.
• Coordinate with internal teams to integrate FedRAMP requirements.
• Automate POA&M and continuous monitoring activities.
• Conduct regular security assessments and audits for compliance.
• Provide expert guidance on FedRAMP topics to teams and auditors.
• Prepare compliance reports for senior management.

Skills

FedRAMP security

Security Operations

Communication

Project management

Risk assessment

Cybersecurity governance

Cloud security

Incident response

Education

CISSP or equivalent certifications (CISSP, GCIH, GCFA, CEH)

GRC/security frameworks knowledge (NIST, FISMA)

Tools

Azure GovCloud

Sentinel

Nessus

HCL AppScan

JIRA

SIEM

IDS/IPS

EDR

Job description

As the number of cyberattacks and digital threats continue to grow, our world needs more passionate and innovative individuals who seek to be trailblazers in and shapers of the rapidly evolving cybersecurity landscape. At Trend Micro, we offer tremendous opportunities that will challenge and equip you to become engineered to do good in whatever path you take. By choosing to be an agent of change, you will be part of an impactful mission that aims to make the world safe for exchanging digital information.

What you'll do:

• Lead and Manage FedRAMP Operations Act as the PH Technical Lead for processing FedRAMP security cases for Incident Management with FedRAMP Ops members of the Americas Region.
• Leverage a team of L1 SOC Analysts responsible for FedRAMP security alert monitoring.
• Overseeing security monitoring and compliance efforts Compliance Program Development and Management Develop, implement, and manage the FedRAMP compliance program, ensuring that all cloud services adhere to stringent FedRAMP standards.
• Work directly with TrendMicro VisionOne/CloudOne products for Government SaaS offerings and FIPS-compliant software releases.
• Lifecycle Management Coordinate and manage all phases of the FedRAMP lifecycle, including initial assessments, authorizations, continuous monitoring, and reauthorizations.
• Collaboration and Integration Collaborate extensively with internal teams (IT, security, development) to integrate FedRAMP requirements into organizational processes and technology stacks.
• Documentation and Automation Develop and maintain System Security Plans (SSP), policies, procedures, and controls to support FedRAMP compliance.
• Automate the Plan of Action & Milestones (POA&M) and other continuous monitoring requirements.
• Regular Security Assessments Conduct regular security assessments and audits to ensure persistent compliance with FedRAMP and other relevant standards.
• Change Monitoring and Compliance Adaptation Monitor changes in FedRAMP requirements and guidelines, adapting practices to stay compliant with the latest updates.
• Guidance and Expertise Serve as the primary point of contact for FedRAMP inquiries and coordination with external auditors and assessors.
• Provide guidance on FedRAMP-related topics to internal teams and conduct security risk assessments.
• Reporting Prepare and present detailed compliance reports to senior management and stakeholders, highlighting the status of FedRAMP initiatives and addressing any areas needing attention.

What you need:

• 3+ years in information security or network administration, particularly within an enterprise-level Security Operations Center (SOC).
• Strong experience with firewalls, Windows Servers, and PCs; experience with routers and switches is preferred.
• Minimum of 3 years in security compliance or Governance, Risk, and Compliance (GRC), preferably supporting U.S. public sector security authorizations.
• In-depth knowledge of Azure GovCloud, Sentinel, Nessus, HCL App Scan, JIRA, SIEM, IDS/IPS, EDR, and network monitoring tools.
• Solid understanding of FedRAMP, CMMC, NIST 800-53, NIST RMF, FISMA, and similar frameworks.
• Proficient in Windows, macOS, and Linux operating systems.
• Capable in risk management and assessment procedures.
• Skilled in network security and architecture, both wired and wireless.
• Knowledgeable in enterprise and security architecture.
• Familiarity with cloud hyperscaler services (e.g., AWS, Azure) and best practices.
• Excellent analytical, problem-solving, and project management capabilities.
• Strong communication and interpersonal skills for effective collaboration with internal teams, auditors, customers, and regulatory bodies.
• Willingness to participate in frequent international video conferences and handle security incidents during non-regular hours.

What will help:

• Industry certifications such as CISSP, GCIH, GCFA, CEH, or similar are highly desirable.
• Self-motivated and fast learner, able to complete tasks with minimal supervision.
• Experience conducting company-wide third-party security risk assessments.
• Advanced expertise in FedRAMP requirements.
• Practical experience in penetration testing, threat hunting, information security management, computer forensics, incident response, or risk management.
• Experience conducting regular security audits to ensure compliance with established standards and frameworks.
• Be Passionate.
• Be Innovative.
• Be a Trender.
• Be #EngineeredToDoGood.

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. Trusted by the largest enterprises and governments across 185 countries, TrendAI™ secures the entire organization, from identities to infrastructure to data. We embrace change, empower our people, and foster innovation in an increasingly connected world. Our diverse, multicultural workforce is at the heart of our global success. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. Explore working at TrendAI™ AI Fearlessly.