Vulnerability Assessment & Management Lead - Hybrid Makati

EastWest Bank; Makati; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

East West Banking Corporation is seeking a Vulnerability Assessment & Management Analyst in Makati City to join our Information Security & Data Protection Office. The role is hybrid and focuses on guiding vulnerability assessment and red-team activities across platforms, infrastructure, and applications.

You will support a team of security professionals, deliver detailed vulnerability reports with remediation steps, and help strengthen the bank's cybersecurity posture through innovative testing

Qualifications

• Bachelor's degree in ICT, Computer Science or related field.
• Professional Security certifications (CISSP, CISM, etc.) required.
• Experience with PCI-DSS, ISO27001, NIST CSF, and data privacy programs preferred.

Responsibilities

• Lead and mentor the red team; set goals and drive performance.
• Oversee VAPT activities across platforms, infrastructure, and applications.
• Ensure security controls are included in design and development; vet vulnerabilities.
• Develop and implement innovative testing methodologies to outpace threats.
• Prepare comprehensive vulnerability reports with remediation steps for stakeholders.
• Oversee vulnerability remediation and patch management across the enterprise.
• Support risk-based prioritization and remediation planning.
• Assist workshop processes, runbooks, and planning for assessments.

Skills

Leadership

Communication

Analytical thinking

Education

Bachelor's degree ICT/CS

Professional Security Certifications (CISSP/CISM)

Tools

Kali Linux

Tenable

Rapid7

Metasploit

Burp Suite

Qualys

Nmap

Job description

East West Banking Corporation is seeking a Vulnerability Assessment & Management Analyst in Makati City to join our Information Security & Data Protection Office. The role is hybrid and focuses on guiding vulnerability assessment and red-team activities across platforms, infrastructure, and applications.

You will support a team of security professionals, deliver detailed vulnerability reports with remediation steps, and help strengthen the bank's cybersecurity posture through innovative testing