Vice President, Infrastructure and Network Security

Rising Tide Digital, Inc.; Taguig; Sur place; PHP 6 000 000 - 12 000 000; Plein temps

Résumé du poste

Rising Tide Digital, Inc. seeks a Vice President of Infrastructure & Network Security to lead hands-on efforts in transforming the bank's security posture with AI-powered automation.

You will own and evolve a portfolio of platforms (microsegmentation, ZTNA, vulnerability management, PAM, asset intelligence, email and database security) and drive an AI-driven modernization across the ecosystem while building a high-performing team.

Qualifications

• 8+ years of progressive information security or network engineering experience with at least 3 years in technical leadership roles.
• Hands-on work with network/infrastructure security platforms, capable of configuring segmentation policies and troubleshooting ZTNA issues.
• Experience building or deploying AI/automation solutions in a security context such as AI-powered triage or automated pipelines.
• History of leading security platform deployments and migrations while in the technical weeds.
• Deep expertise in network security architecture including microsegmentation, ZTNA/SASE, firewalls and email security.
• Hands-on experience with vulnerability management platforms (Qualys or equivalent) including configuration, reporting and remediation workflows.
• Experience with privileged access management solutions (CyberArk, BeyondTrust, Delinea, or equivalent).
• Familiarity with asset intelligence platforms (Axonius) for coverage gap analysis and hygiene enforcement.
• Understanding of AI/LLM agent architectures, and automation orchestration to integrate with security platforms via APIs.
• Knowledge of banking compliance frameworks (FFIEC, GLBA, PCI DSS) as they relate to security controls.

Responsabilités

• Champion AI transformation to eliminate manual toil and scale productivity by emitting AI agents across security platforms.
• Inventory and map manual workflows and build an AI automation roadmap to replace them.
• Build and maintain AI agents for vulnerability triage, segmentation policy recommendations, PAM workflows, and cyber hygiene dashboards.
• Own and operate the security platform portfolio including microsegmentation, ZTNA/SASE, vulnerability management, PAM, asset intelligence, and email/database security.
• Architect and implement segmentation strategies, ZTNA policies, and least-privilege controls.
• Drive cyber hygiene programs including scanning, patch validation, compliance, and asset inventory with AI assist.
• Lead and develop the infrastructure and network security team through coaching and hands-on collaboration.
• Execute the roadmap with platform upgrades, AI agent deployments, and tool consolidations.
• Oversee vulnerability management lifecycle, patch compliance, and configuration drift with AI-assisted triage and reporting.
• Troubleshoot complex issues and manage vendor escalations across the portfolio.

Connaissances

Security leadership

AI automation

Vulnerability management

Network security

Privileged access management

Asset intelligence

Threat modeling

Outils

Guardicore

Cisco Secure Access

Qualys VMDR

PAM tools

Axonius

AI agents

Description du poste

About the role

The Vice President, Infrastructure & Network Security is a hands‑on technical leader responsible for driving the execution of Axos Bank's network security, infrastructure hardening, and cyber hygiene strategy—and for fundamentally transforming how this function operates through AI. This role owns a critical portfolio of security platforms—including microsegmentation, ZTNA, vulnerability management, privileged access management, asset intelligence, email security, and database security—and is accountable for both their day‑to‑day operations and their AI‑driven transformation. A defining expectation of this role is to champion the AI transformation of the infrastructure and network security team by identifying every manual, repetitive, and human‑dependent workflow across the platform portfolio and systematically building or deploying AI agents to automate them.

Key responsibilities

• Champion the AI transformation of the infrastructure and network security function with a clear mandate: identify, build, and deploy AI agents that eliminate manual toil and scale team productivity by 10x

• Inventory every manual and repetitive workflow across the platform portfolio—vulnerability triage, scan scheduling, PAM access reviews, asset reconciliation, segmentation policy recommendations, compliance evidence gathering, executive reporting—and build an AI automation roadmap to systematically replace them

• Build and maintain AI agents that perform work traditionally done by analysts: triaging vulnerability findings with risk-based prioritization, generating microsegmentation policy recommendations based on traffic analysis, automating privileged access certifications, and producing cyber hygiene dashboards and reports

• Own and operate the team's security platform portfolio: microsegmentation (Guardicore), ZTNA/SASE (Cisco Secure Access), vulnerability management (Qualys VMDR), privileged access management (PAM), asset intelligence (Axonius), email security, and database security platforms

• Architect and implement network security solutions including segmentation strategies, ZTNA policies, secure access configurations, and least‑privilege network controls

• Drive the cyber hygiene program including vulnerability scanning, patch validation, configuration compliance, and asset inventory accuracy—increasingly through AI agents rather than manual processes

• Build and lead a high‑performing infrastructure and network security team, developing team capability through pairing on technical work and coaching team members while solving problems together

• Drive execution of the infrastructure and network security roadmap including platform upgrades, AI agent deployments, capability enhancements, and tool consolidations

• Own the enterprise cyber hygiene program: vulnerability management lifecycle, patch compliance tracking, configuration drift detection, and security baseline enforcement—with AI agents handling the bulk of triage, prioritization, and reporting

• Troubleshoot complex technical issues across the platform portfolio and drive vendor escalations to resolution

Requirements:

• 8+ years of progressive experience in information security or network engineering with at least 3 years in technical leadership roles where you personally built solutions while managing teams

• Recent hands‑on work with network and infrastructure security platforms—not just oversight. You should be able to configure a segmentation policy, build a Qualys scan profile, design a PAM workflow, or troubleshoot a ZTNA connectivity issue without handing it off

• Demonstrated experience building or deploying AI/automation solutions in a security context—this could include AI‑powered triage workflows, LLM‑based investigation agents, automated compliance pipelines, or similar

• History of driving security platform deployments, migrations, or maturity initiatives where you were personally in the technical weeds, not just managing from above

• Deep expertise in network security architecture including microsegmentation, ZTNA/SASE, firewalls, email security, and network access control

• Strong hands‑on experience with vulnerability management platforms (Qualys or equivalent) including scan configuration, asset grouping, reporting, and remediation workflows

• Experience with privileged access management solutions (CyberArk, BeyondTrust, Delinea, or equivalent) including vault architecture, session management, and credential rotation

• Familiarity with asset intelligence and cyber asset management platforms (Axonius or equivalent) for coverage gap analysis and security hygiene enforcement

• Understanding of AI/LLM agent architectures, prompt engineering, and automation orchestration platforms—enough to design, build, or direct the build of AI agents that integrate with security platforms via APIs

• Understanding of banking compliance frameworks (FFIEC, GLBA, PCI DSS) as they relate to network and infrastructure security controls