Vulnerability Assessment & Management Analyst

East West Banking Corp; Philippines; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Career development opportunities

Competitive salary package and regular

Incentives and recognition programs

Mentoring by industry experts

Defined career progression paths

Job summary

East West Banking Corporation is seeking an experienced Vulnerability Assessment & Management Analyst in Makati City. The role is hybrid and focuses on leading vulnerability assessments, managing security programs, and mentoring the team to strengthen our security posture.

You will work with the Information Security & Data Protection Office to implement controls, analyze threats, and report findings to executives. A strong ICT/CS background and VAPT experience are required.

Qualifications

• Bachelor's degree in ICT/CS/Cybersecurity or related field.
• Professional cybersecurity certifications such as CISSP, CISM, CEH preferred.
• Demonstrated experience in Information Security, Cybersecurity, IT Risk Management, Network Security or related disciplines.
• Experience implementing and managing PCI-DSS, ISO 27001, NIST CSF, and Data Privacy programs.
• Hands-on experience with VAPT tools (listed).

Responsibilities

• Lead and support vulnerability assessments, Pen testing, and red team engagements across apps, infra, and enterprise platforms to identify and mitigate risks.
• Guide and mentor team members by setting goals, coaching, and driving professional growth.
• Ensure security controls are embedded in new projects, changes, and development through proactive reviews and assessments.
• Develop and enhance red team testing methodologies to address evolving threats.
• Oversee enterprise vulnerability and threat management programs including prioritization, patching and reporting.
• Analyze threat intelligence and vulnerability data to assess exposure and recommend remediation.
• Prepare and present reports and dashboards to stakeholders on vulnerabilities and security posture.

Skills

VAPT knowledge

Threat modeling

Security mentoring

Stakeholder reporting

Education

Bachelor's degree in ICT/CS/Cybersecurity

Tools

Kali Linux

Tenable

Rapid7

Metasploit

Burp Suite

Qualys

Nmap

Job description

About the Job

Location: Makati City

Corporate Title: Assistant Manager to Manager

Work Arrangement: Hybrid

Our Information Security & Data Protection Office team is looking for experienced professionals to join us in Makati City with the role of Vulnerability Assessment & ManagementAnalyst.

In this role you will provide expert advice and guidance on Information Security matters, ensuring stakeholders are well-informed for sound security decisions. Effectively support the Information Security team, fostering a positive and innovative work environment. You will also have to provide support a team of Vulnerability Assessment and Penetration Testing (VAPT) and Information Security/Risk Management security professionals.

Your dream. Our focus.

East West Banking Corporation (EastWest) is one of the largest universal banks in the Philippines, and is committed to continuously invest in people and in process, product, and service enhancements, and embrace new ideas to enhance the EastWest experience.

We empower our employees to drive their careers and are committed to provide the runway for them to grow. We value teamwork and individual initiative. Join us and be part of a highly engaged team, and a workplace that promotes development and goal attainment.

Whether you're just starting out, or already a seasoned professional, EastWest can help you unleash your potential, and bridge the gap between dream to success.

What the role will entail

• Lead and support vulnerability assessments, penetration testing, and red team engagements across applications, infrastructure, and enterprise platforms to identify and mitigate cybersecurity risks.
• Guide and mentor team members by setting performance goals, providing coaching, and fostering professional growth to ensure effective team delivery.
• Ensure security controls are embedded in new projects, system changes, and development initiatives through proactive security reviews and vulnerability assessments.
• Develop and enhance red team testing methodologies, tactics, techniques, and procedures to address evolving cyber threats and maintain effective security testing capabilities.
• Oversee enterprise vulnerability and threat management programs, including vulnerability prioritization, remediation planning, patch management, and risk-based reporting.
• Analyze threat intelligence, vulnerability data, and security trends to assess organizational exposure and recommend actionable remediation strategies.
• Prepare and present comprehensive technical and executive-level reports, metrics, and dashboards on vulnerabilities, security posture, assessment coverage, and remediation effectiveness to key stakeholders.

What we’re looking for

• Bachelor's degree in Information and Communications Technology (ICT), Computer Science, Cybersecurity, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, CEH, or equivalent credentials preferred.
• Demonstrated experience in Information Security, Cybersecurity, IT Risk Management, Network Security, or related disciplines.
• Proven expertise in implementing and managing security and compliance frameworks, including PCI-DSS, ISO 27001, NIST Cybersecurity Framework, and Data Privacy programs.
• Hands‑on experience with vulnerability assessment and penetration testing (VAPT) tools such as Kali Linux, Tenable, Rapid7, Metasploit, Burp Suite, Qualys, and Nmap.
• Strong technical knowledge of vulnerability management, penetration testing methodologies, networking technologies (TCP/IP, SSH, SFTP, VPNs, firewalls, routers), and Windows/Linux operating systems.

What you can expect from joining our team

• Career development and training opportunities
• Competitive salary package and benefits
• Performance-based incentives and recognition programs to reward high-performing individuals
• Opportunity to work with industry experts and be mentored by them
• Defined career progression paths to guide you in your professional growth

To know more about us, and our career opportunities visit https://careers-page.com/eastwest-bank