Cyber Security Manager

• Develop, implement, and maintain the cyber security strategy, policies, and standards covering the online gaming platform and corporate environments.
• Lead security operations, including threat monitoring, detection, incident response, and forensic investigation, ensuring incidents are contained and resolved within agreed timelines.
• Manage the vulnerability management program, including scanning, penetration testing, and remediation tracking across applications and infrastructure.
• Oversee security architecture reviews for new systems, platform integrations, and third-party service providers, including PAGCOR-mandated integrations.
• Operate and optimize security technologies such as SIEM, EDR, WAF, IDS/IPS, and DLP, evaluating new tools as the threat landscape evolves.
• Ensure compliance with regulatory and industry requirements, including PAGCOR, the Data Privacy Act, PCI DSS, and ISO 27001, supporting audits and certification activities.
• Design and deliver security awareness programs to strengthen the organization's security culture.
• Lead, mentor, and develop the security engineering and operations team, managing performance and capability development.
• Coordinate with GRC, IAM, network, server, and DevOps teams to embed security controls across systems and processes.
• Manage third-party security providers, including SOC, penetration testing, and threat intelligence vendors, against defined SLAs.
• Maintain and regularly test the incident response plan and supporting playbooks, including tabletop and simulation exercises.
• Report security posture, key risks, and incident metrics to senior management and recommend risk treatment actions.

Key Performance Indicators/Key Success Factors

• Mean time to detect and mean time to respond to security incidents.
• Percentage of critical and high vulnerabilities remediated within SLA.
• Closure rate of audit and compliance findings within committed dates.
• Security awareness training completion rate and phishing simulation results.
• Availability and coverage of security monitoring tools across critical systems.