INFORMATION SECURITY OFFICER | INFORMATION TECHNOLOGY | SB FINANCE | MAKATI
MAKATI
Applications have closed
Security Bank
About Security Bank
We are the Philippines’ largest independent bank, having won countless awards over the years including the most prestigious industry award in both 2015 and 2016—the Bank of the Year – Philippines by The Banker.
We’re changing how people bank. From the moment customers enter our branches to their experience online, we make them feel valued and empowered.
Now, with more than 300 branches spanning the country, BetterBanking has become the gold standard in improving the banking lives of millions of Filipinos. But we’re far from done.
In our constant pursuit of excellence and improvement, we create teams that support our business and each other.
The Role
As Information Security Officer, involves a supporting role and integral member to our InfoSec team. The ISO is an internal triage analyst who assesses security events and incidents. Monitors environments and reports analytics to management. It also plays an instrumental role supporting compliance and audit by validating and mitigating the required controls and mitigations that are required.
How you'll contribute
- Research and tests new information security tools and controls
- Evaluates application configurations and advises on security Issues
- Participates in investigations that require electronic information
- Monitor and supports the implementation of Data Loss Protection procedures and practices
- Conducts security and risk assessments of change requests and advises the IT team
- Carries out continual assessments of infrastructure and data - identifying potential vulnerabilities and proposing solutions
- Evaluate effectiveness of existing security measures
- Monitors compliance to Information Security policies
- Recommends and participate in regular training programs for employees on IT, Information, and Cyber Security
- Monitors infrastructure, applications, and Operating Systems to ensure up to date versions and patches are tested and implemented
- Contributes to the Maintenance of risk registers
- Implements the recommendations from independent assessments and audits
- Produces regular reports and analytics on internal and external cyber / information security threats to the Secretariat
- Provides advice on best practices and standards on security and risk in IT
- Provides occasional out of hours support
What we’re looking for
- Bachelor’s Degree in BSIT, Computer Science, or related field is required.
- At least 4 years relevant experience in security at a Financial Technology Company or similar environment.
- Good communication and cooperation skills with the ability to articulate complex issues.
- The ability to analyze problems, provide recommendations, and resolutions accordingly.
- Ability to deal with ambiguity and willingness to learn new skill sets while delivering.
- Knowledge of industry standards such as but not limited to PCI-DSS, ISO27001, AWS Best Practice, NIST Cybersecurity Framework, BSP Circulars 808, 982, 1019 and Data Privacy Act.
- Working toward obtaining a professional certification (i.e., Sec+, A+, Microsoft Security, CCNA, Cybersecurity and SSCP desirable but not required)
#LI-ST1
#LI-Hybrid
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Analytics Audits AWS Banking Compliance Computer Science Finance ISO 27001 NIST Privacy Risk assessment SSCP Vulnerabilities
Perks/benefits: Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Staff Security Engineer jobs
- Open Information Security Specialist jobs
- Open Senior Security Analyst jobs
- Open Security Operations Engineer jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Senior Information Security Analyst jobs
- Open Product Security Engineer jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Cybersecurity Analyst jobs
- Open Cyber Security Specialist jobs
- Open Principal Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Specialist jobs
- Open Security Specialist jobs
- Open Chief Information Security Officer jobs
- Open Security Researcher jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Senior Cyber Security Specialist jobs
- Open Information System Security Officer (ISSO) jobs
- Open Agile-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open CISM-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open Analytics-related jobs
- Open SaaS-related jobs
- Open IAM-related jobs
- Open CISA-related jobs
- Open Threat intelligence-related jobs
- Open Security assessment-related jobs
- Open DevOps-related jobs
- Open Java-related jobs
- Open Kubernetes-related jobs
- Open EDR-related jobs
- Open Malware-related jobs
- Open APIs-related jobs
- Open IDS-related jobs
- Open Security Clearance-related jobs
- Open CI/CD-related jobs
- Open DevSecOps-related jobs