Vulnerability Assessment & Management Lead

EastWest Bank; Makati; Hybrid; PHP 1,000,000 - 1,500,000; Full time

Job summary

EastWest Banking Corporation in Makati City is seeking a Vulnerability Assessment & Management Analyst to join our Information Security & Data Protection Office in a hybrid role. You will lead vulnerability assessments, support a red team, and guide risk-based vulnerability remediation across platforms and applications.

The role requires a Bachelor’s degree in ICT/CS or related field and relevant security certifications, with experience in PCI-DSS, ISO27001, and NIST CSF.

Qualifications

• Bachelor's degree in ICT/Computer Science or related field.
• Multiple professional security certifications (e.g., CISSP, CISM).
• Experience with PCI-DSS, ISO27001, NIST CSF, and Data Privacy programs.

Responsibilities

• Lead and coach the red team to achieve effective performance goals.
• Execute vulnerability assessments and penetration testing across platforms, infrastructure, and applications.
• Ensure security controls are integrated in new projects and changes with proper vetting to mitigate vulnerabilities.
• Develop and refine innovative testing methodologies to stay ahead of threats.
• Prepare clear, detailed reports with mitigations and present findings to stakeholders.
• Oversee vulnerability remediation and patch management across the enterprise.
• Support risk-based prioritization and remediation steps.
• Contribute to workshop processes, playbooks for vulnerability handling, and engagement planning.
• Produce metrics and reports on vulnerabilities, coverage, and remediation effectiveness.
• Provide executive-level reporting and maintain a threat database.

Skills

Information Security

Risk assessment

Threat modeling

Red team guidance

Vulnerability management

Education

Bachelors Degree in ICT/Computer Science or related

Tools

Kali Linux

Tenable

Rapid7

Metasploit

Burp Suite

Qualys

Nmap

Job description

EastWest Banking Corporation in Makati City is seeking a Vulnerability Assessment & Management Analyst to join our Information Security & Data Protection Office in a hybrid role. You will lead vulnerability assessments, support a red team, and guide risk-based vulnerability remediation across platforms and applications.

The role requires a Bachelor’s degree in ICT/CS or related field and relevant security certifications, with experience in PCI-DSS, ISO27001, and NIST CSF.