Security Consulting and Risk Officer (Client-site)Umpisa Inc. • Taguig, Metro Manila, PH

Security Consulting and Risk Officer (Client-site)

Umpisa Inc. • Taguig, Metro Manila, PH

23 hours ago

Job type

Quick Apply

Job description

At Umpisa Inc. , our mission is to make the Philippines be known globally as a tech hub.

Umpisa Inc. is a progressive technology services company that partners with select industries, clients and people to work on pioneering and industry-changing solutions via digital transformation, modern software development and venture building.

We create a set of world-class and impactful products and solutions to help organizations and individuals live better lives. We offer demanding, challenging and rewarding careers in software development, product development, emerging technologies, and more for the right candidates.

Essential Skills

Aligns with our values : Excellence, Integrity, Professionalism, People Success, Customer Success, Fun, Innovation and Diversity
Strong communication skills
Strong problem solving and analytical skills
Excellent problem-solving ability
Would like to work as part of a self-organizing Scrum team in a scaled agile framework
Must be a self-starter and loves to collaborate with the team and client

Job Summary :

Responsible for securing data, network, and applications in system development or system implementations. Perform threat modeling, business and technical process analysis, application security and architecture reviews to evaluate, identify vulnerabilities and enforce security controls in IT and application systems. Ensures coordination of penetration testing support and vulnerability validation scans of systems project.

Specific Duties & Responsibilities :

Work closely with cross-functional teams - ITG Infrastructure team, ITG DevOps team, Developers, Solutions and Enterprise Architects, Technical Project Managers, Delivery Managers and Project Proponents.

Helps to improve the security health of the application systems, information processing facilities and connected services of the bank by :

Providing security consulting services on information security related matters for on premise and cloud-based project implementations and deployments.

Serves as project security technical point of contact for system development as it relates to automation, continuous integration / continuous deployment activities and products / services being developed and deployed across the full application development life cycle.

Ensure enforcement of security requirements across all new application systems and API deployments.

Performs threat modeling and business / technical process analysis to identify vulnerabilities / weaknesses on processes and technology implementations thru a documented analysis and assessment report.

Standardize the technical, functional and administrative security requirements covering areas of application system, technical design and architecture.

Ensures that the security requirements align with the business objective of the application systems to be implemented.

Provides consulting on technical designs and solutions to address infrastructure security and application security related weaknesses.

Collaborate with relevant stakeholders to implement security improvements.

Collaborate with the appropriate subject matter expert in Security Architecture and Innovation Department in reviewing security architecture and addressing architecture concerns in a project.

Ensures that source code reviews are performed and validated across all platforms and frameworks.

Coordinates application vulnerability scanning and penetration testing remediation activities with ITG developers.

Assist with vulnerability prioritization and provide guidance on resolution.

Ensures that standard security requirements are kept updated.

Maintains an expert knowledge in the field of Information Security and the related issues, systems, processes, products, and services. Stay current with best security practices.

Collaborates with other ITG Servicing units and application teams to harden its operating systems and application systems to better protect user data when implemented.

Proactively works with the Department Head in implementing programs for the continuous improvement of the bank’s information security posture.

Perform other information security governance, risk and compliance related duties and responsibilities as directed by the Department Head.

Requirements

Graduate of any college degree in Computer Science or Information Security, or related technical field of expertise.

General understanding of regulatory compliance and how it relates to application security and privacy.

Certification training may include is CISA, CISM, SANS GIAC, CISSP, PCI-DSS, etc.)

Understanding of network and application security risks and how to address them.

History of designing, developing, or customizing application systems a plus.

Extensive and deep technical knowledge / understanding of system development, typically ranging from front-end user interfaces all the way to the back-end systems of both on premise and cloud deployment.

Working knowledge of on premise and cloud architectures.

Strong familiarity with web protocols and web services, networking concepts and encryption.

Understanding of Microsoft, Linux / Unix security architecture.

Strong attention to detail, analytical, and problem-solving skills. Thinking logically and intuitively; strong learning agility with the ability to learn new processes / patterns

Result-orientated in terms of disposition for corrective action and security remediation.

Have good teamwork and collaboration skills, a good team player with the ability to lead.

Good written and verbal communication skills : to effectively articulate and explain complex security topics in simple language and easy to understand concepts.

Possess excellent time management skills, thrive in a fast paced demanding environment

Be a self-managed, self-starter with good organizational skills to include good follow-up skills

Knowledge in using MS office tools such as PowerPoint, word, excel and project

Create a job alert for this search

Security And Officer • Taguig, Metro Manila, PH

Related jobs

Chief Risk Officer

HRTX • Makati City, Metro Manila, Philippines

We are seeking a highly experienced Chief Risk Officer to join our leadership team.This role will be instrumental in shaping and executing the organizations enterprise-wide risk management framewor...Show more

Last updated: 30+ days ago

Risk and Compliance Analyst

NAIS CORP • Ortigas, National Capital Region, PH

Job Description As a Risk and Compliance Analyst, you will play a key role in ensuring the organisation’s operations, systems, and processes comply with internal policies, regulatory standards, ...Show more

Last updated: 4 days ago • Promoted

Senior IT Security and Regulatory Consultant

Henkel • Makati, NCR, Philippines

As a Senior IT Security and Regulatory Consultant, you will be at the forefront of ensuring that Henkel’s IT landscape remains secure and compliant with the rapidly evolving cybersecurity laws and ...Show more

Last updated: 30+ days ago

Senior IT Security and Regulatory Consultant - Urgently Hiring!

Henkel • Makati, NCR, Philippines

Last updated: 30+ days ago

Security Operation Center (SOC) Lead

Questronix Corporation • San Pedro, Laguna, PH

Quick Apply

Lead a team of Cyber Security Analysts within the Security Operations Center (SOC).Manage and execute hands-on technical detection, analysis, containment, eradication, and remediation to support da...Show more

Last updated: 30+ days ago

Director, Falcon Cloud Security (Remote)

CrowdStrike • General Trias, Cavite, Philippines

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches...Show more

Last updated: 18 days ago • Promoted

Leads Generation Executive

SEEK Asia (JobStreet.com Philippines Inc.) • Bulacan, Leyte, Philippines

SEEK operates market-leading online employment marketplaces, including Jobstreet and Jobsdb in Asia.SEEK has been helping people live more fulfilling and productive working lives and helping organi...Show more

Last updated: 2 days ago • Promoted

Risk & Compliance Officer - Pasig

WHR Global Consulting • Pasig, National Capital Region, PH

Job Summary : The Risk Officer is responsible for supporting the implementation and execution of the enterprise risk management (ERM) framework across the organization. The role focuses on identifyi...Show more

Last updated: 30+ days ago • Promoted

Deputy Chief Risk Officer (Enterprise Risk Management)

HRTX • Makati City, Metro Manila, Philippines

The Deputy Chief Risk Officer is responsible for leading the development, implementation, and continuous improvement of the enterprise-wide risk management framework. The role ensures that risk stra...Show more

Last updated: 30+ days ago

Cyber Security Consultant

Henkel • Makati, NCR, Philippines

As a Cybersecurity Consultant at Henkel, you will play a critical role in strengthening our organization's information security posture across global operations. Your primary goal will be to conduct...Show more

Last updated: 30+ days ago

Consulting Associate Strategy and Analytics - 3 months to 4 months contract

Private Advertiser • Angeles, Pampanga, Philippines

We are seeking a highly analytical and driven Consulting Associate to join our strategy team.The ideal candidate has top-tier consulting experience (MBB or Tier 2), strong problem-solving skills, a...Show more

Last updated: 2 days ago • Promoted

Cybersecurity Consultant (Onsite)

Blaseek • Taguig, National Capital Region, PH

About the Role We are seeking a highly skilled Security SME with expertise in configuring native security solutions across both cloud and on-premises platforms. This role involves designing, impleme...Show more

Last updated: 30+ days ago • Promoted

Principal DevOps Engineer (Remote)

LegalMatch Philippines, Inc. • Angeles, Pampanga, Philippines

As a technical and strategic leader, you will lead the design, creation, and evolution of tools, infrastructure, practices and capabilities to support the efficient deployment of LegalMatch product...Show more

Last updated: 2 days ago • Promoted

Associate Partner Success ManagerNew

connectwise philippines inc • , Pampanga, Philippines, Pampanga, Philippines

Partner Success Manager is responsible for alignment at the leadership level of our low touch and tech touch partners while building and maintaining strong relationships to help these select partne...Show more

Last updated: 2 days ago • Promoted

Senior IT Security and Regulatory Consultant - Now Hiring!

Henkel • Makati, NCR, Philippines

Last updated: 30+ days ago