Vulnerability Assessment & Management Analyst

East West Banking Corporation; Makati; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

East West Banking Corporation in Makati City invites a Vulnerability Assessment & Management Analyst to join our Information Security & Data Protection Office. Hybrid work arrangement with opportunities to advance security capabilities across applications, infrastructure, and enterprise platforms.

You will lead assessments, guide a team, ensure controls in new projects, and deliver technical and executive reports on vulnerabilities and remediation effectiveness, while collaborating with risk,

Qualifications

• Bachelor's degree in ICT, CS, Cybersecurity, or related field.
• Certifications such as CISSP, CISM, CEH preferred.
• Experience in Information Security, IT risk, network security.
• Familiar with PCI-DSS, ISO 27001, NIST CSF, Data Privacy programs.
• Hands-on with vulnerability assessment and penetration testing tools.

Responsibilities

• Lead vulnerability assessments, penetration testing, and red team engagements across applications, infrastructure, and enterprise platforms to identify and mitigate cybersecurity risks.
• Guide and mentor team members by setting performance goals, providing coaching, and fostering professional growth to ensure effective team delivery.
• Ensure security controls are embedded in new projects, system changes, and development initiatives through proactive security reviews and vulnerability assessments.
• Develop and enhance red team testing methodologies, tactics, techniques, and procedures to address evolving cyber threats and maintain effective security testing capabilities.
• Oversee enterprise vulnerability and threat management programs, including vulnerability prioritization, remediation planning, patch management, and risk-based reporting.
• Analyze threat intelligence, vulnerability data, and security trends to assess organizational exposure and recommend actionable remediation strategies.
• Prepare and present comprehensive technical and executive-level reports, metrics, and dashboards on vulnerabilities, security posture, assessment coverage, and remediation effectiveness to key stakeholders.

Skills

Vulnerability assessment

Penetration testing

Security governance

Team mentorship

Executive reporting

Education

Bachelor's degree in ICT/CS/Cybersecurity

Tools

Kali Linux

Tenable

Rapid7

Metasploit

Burp Suite

Qualys

Nmap

Job description

Corporate Title: Assistant Manager to Manager

Work Arrangement: Hybrid

Our Information Security & Data Protection Office team is looking for experienced professionals to join us in Makati City with the role of Vulnerability Assessment & Management Analyst.

In this role you will provide expert advice and guidance on Information Security matters, ensuring stakeholders are well-informed for sound security decisions. Effectively support the Information Security team, fostering a positive and innovative work environment. You will also have to provide support a team of Vulnerability Assessment and Penetration Testing (VAPT) and Information Security/Risk Management security professionals.

East West Banking Corporation (EastWest) is one of the largest universal banks in the Philippines, and is committed to continuously invest in people and in process, product, and service enhancements, and embrace new ideas to enhance the EastWest experience.

We empower our employees to drive their careers and are committed to provide the runway for them to grow. We value teamwork and individual initiative. Join us and be part of a highly engaged team, and a workplace that promotes development and goal attainment.

Whether you're just starting out, or already a seasoned professional, EastWest can help you unleash your potential, and bridge the gap between dream to success.

What the role will entail

• Lead and support vulnerability assessments, penetration testing, and red team engagements across applications, infrastructure, and enterprise platforms to identify and mitigate cybersecurity risks.
• Guide and mentor team members by setting performance goals, providing coaching, and fostering professional growth to ensure effective team delivery.
• Ensure security controls are embedded in new projects, system changes, and development initiatives through proactive security reviews and vulnerability assessments.
• Develop and enhance red team testing methodologies, tactics, techniques, and procedures to address evolving cyber threats and maintain effective security testing capabilities.
• Oversee enterprise vulnerability and threat management programs, including vulnerability prioritization, remediation planning, patch management, and risk-based reporting.
• Analyze threat intelligence, vulnerability data, and security trends to assess organizational exposure and recommend actionable remediation strategies.
• Prepare and present comprehensive technical and executive-level reports, metrics, and dashboards on vulnerabilities, security posture, assessment coverage, and remediation effectiveness to key stakeholders.

What we're looking for

• Bachelor's degree in Information and Communications Technology (ICT), Computer Science, Cybersecurity, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, CEH, or equivalent credentials preferred.
• Demonstrated experience in Information Security, Cybersecurity, IT Risk Management, Network Security, or related disciplines.
• Proven expertise in implementing and managing security and compliance frameworks, including PCI-DSS, ISO 27001, NIST Cybersecurity Framework, and Data Privacy programs.
• Hands-on experience with vulnerability assessment and penetration testing (VAPT) tools such as Kali Linux, Tenable, Rapid7, Metasploit, Burp Suite, Qualys, and Nmap.
• Strong technical knowledge of vulnerability management, penetration testing methodologies, networking technologies (TCP/IP, SSH, SFTP, VPNs, firewalls, routers), and Windows/Linux operating systems.

What you can expect from joining our team

• Career development and training opportunities
• Competitive salary package and benefits
• Performance-based incentives and recognition programs to reward high-performing individuals
• Opportunity to work with industry experts and be mentored by them
• Defined career progression paths to guide you in your professional growth

To know more about us, and our career opportunities visit https://careers-page.com/eastwest-bank