VAPT Head

Job description

SM Investments | Pasay City | On-site At SM Investments, we shape sustainable growth stories that uplift industries and communities. Join one of the Philippines’ leading conglomerates and help safeguard a dynamic ecosystem of retail, banking, and property businesses. About the RoleWe’re looking for a highly motivated Cyber Security Vulnerability Specialist who will lead vulnerability management and remediation efforts across our organization. You will drive assessments, automation, threat monitoring, and risk analysis to ensure a secure and compliant environment. What You’ll Do: Vulnerability & Compliance ManagementLead daily infrastructure and application vulnerability scanning and onboardingAnalyze scan results, prepare reports, and coordinate timely remediationConduct policy compliance scans and maintain updated security recordsAutomation & FeasibilityIdentify opportunities to automate security processesDevelop and improve automation initiativesPerform feasibility studies for new security measuresThreat Monitoring & Risk AssessmentTrack daily threat intel, bulletins, and industry trendsHandle risk assessments for new apps, architectures, and exemption requests (WAF, Snyk, whitelisting, etc.)Provide recommendations to mitigate identified risksPeriodic Security OperationsManage policy configuration, onboarding, firewall rule reviews, and password auditsCoordinate remediation activities across teamsWhat We’re Looking ForBachelor’s degree in Computer Science, Information Security, or related fieldAt least 5 years of relevant experienceStrong understanding of security principles, vulnerability management, and risk analysisFamiliarity with VA tools, threat intelligence, and automationExcellent communication, analytical, and problem-solving skillsDevelopment experience is an advantageSecurity certifications (CISSP, CISM, CEH) are a plus Why Join Us?Be part of a team that protects the digital backbone of one of the country’s largest and most influential conglomerates. If you’re passionate about security, continuous improvement, and high-impact work — we’d love to meet you.