Third Party Security Management Manager

Globe Telecom, Inc.; Metro Manila; On-site; PHP 2,400,000 - 3,600,000; Full time

Benefits offered by this job

Career growth and development

Flexible compensation package

Leading FinTech employer

Job summary

GCash is seeking a Senior TPSM Leader to design and drive the Third-Party Security Management program in Manila. You will mentor analysts, optimize assessment turnaround times, and ensure risk standards are met across the vendor ecosystem.

You will collaborate with Legal and Compliance, define risk criteria, and report metrics to senior leadership to support risk-based decisions.

Qualifications

• 7+ years in cybersecurity or information security.
• 4+ years in third-party security risk assessments.
• Experience leading security teams and enterprise-scale programs.
• Strong project management is a plus.

Responsibilities

• Lead TPSM program design and execution, mentoring a security team.
• Define third-party risk framework, assessment criteria, and reporting.
• Oversee risk controls validation and contract security clauses.
• Squad leadership for cross-functional TPSM initiatives.

Skills

NIST & ISO 27000 knowledge

SOC 2 & PCI DSS

TPRM & GRC platforms

JIRA ticketing

Stakeholder communication

Education

Bachelor’s or Master’s degree in Cybersecurity/IT

Tools

OneTrust

Archer

ProcessUnity

ServiceNow

Job description

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!

Key Responsibilities

Program Leadership & Strategic Initiatives Lead the design and execution of long-term initiatives to enhance the maturity of the Third-Party Security Management (TPSM) program. Lead, mentor, and develop a team of security analysts, ensuring high-quality output Identify process inefficiencies and lead optimization efforts to reduce assessment turnaround times without compromising risk standards. Direct and lead TPSM Team cross-functional projects

Risk Assessment & Governance

Define and maintain the third-party security assessment framework, including risk tiering and criteria, assessment methodology, and reporting criteria. Oversee the assessment and validation of third party security controls Collaborate with Legal to negotiate security clauses and "right-to-audit" provisions in third-party contracts. Manage escalations and third party security gaps to ensure alignment with company policies and global regulations (e.g., GDPR, NIST, ISO).

Monitoring & Incident Management

Implement processes for the ongoing surveillance of third-party security postures Lead the response to third-party security incidents, ensuring proper mitigation, breach notification compliance, and post-incident reporting. Develop and present program metrics and risk indicators to senior leadership to inform risk-based decision-making.

Requirements

Education & Certifications Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field. Highly preferred: CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor.

Professional Experience Minimum of 7 years in cybersecurity or information security. Minimum of 4 years directly managing or performing third-party security risk assessments. Proven experience leading a security team and managing enterprise-scale third party security risk programs. Project management skills are a plus.

Technical Skills & Competencies

Deep technical knowledge of NIST, ISO 27000 series, SOC 2, PCI DSS, and Cloud Security Alliance (CSA) standards. Proficiency with TPRM and GRC platforms (e.g., OneTrust, Archer, ProcessUnity, or ServiceNow) and ticketing systems (e.g., JIRA). Ability to explain complex technical risks to non-technical stakeholders and negotiate effectively with external partners. Strong analytical skill and ability to leverage data and automation to scale risk assessment processes.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country. Working with a dynamic and highly collaborative team who want to change the game. A company that values their people with highly competitive and flexible compensation and benefits package is the #1 Finance App in the Philippines. Through the GCash App, 81M registered users can easily purchase prepaid airtime; purchase from over 6M partner merchants and social sellers; send and receive money anywhere in the Philippines, even to other bank accounts; pay bills at over 1,800 partner billers nationwide; and get access to savings, credit, loans, insurance and investments, and so much more, all at the convenience of their smartphones. GCash is a wholly-owned subsidiary of Mynt (Globe Fintech Innovations, Inc.) since 2015. Mynt, Inc. is the parent company of GCash, the Philippines’ #1 finance superapp, advancing financial inclusion through ‘Finance for All’. G-Xchange, Inc. (GXI) is the payments company for GCash. GXI is a BSP-licensed e-money issuer responsible for the digital payments and electronic money activities in the GCash app. Fuse Financing, Inc. is the financing company for GCash. Fuse provides eligible users with access to fair and digitally-enabled credit products and solutions. Ryse, Inc. broadens access to investments that are easy to use and understand, supporting wealth-building for Filipinos at different stages of their financial journey. BlockG Virtual Assets, Inc. supports responsible participation in digital assets, helping build trust and long-term confidence in the continuously evolving digital landscape.