- Develop, implement,
and maintain the cyber security strategy, policies, and standards covering
the online gaming platform and corporate environments.
- Lead security
operations, including threat monitoring, detection, incident response, and
forensic investigation, ensuring incidents are contained and resolved within
agreed timelines.
- Manage the
vulnerability management program, including scanning, penetration testing,
and remediation tracking across applications and infrastructure.
- Oversee security
architecture reviews for new systems, platform integrations, and third-party
service providers, including PAGCOR-mandated integrations.
- Operate and
optimize security technologies such as SIEM, EDR, WAF, IDS/IPS, and DLP,
evaluating new tools as the threat landscape evolves.
- Ensure compliance
with regulatory and industry requirements, including PAGCOR, the Data Privacy
Act, PCI DSS, and ISO 27001, supporting audits and certification activities.
- Design and deliver
security awareness programs to strengthen the organization's security
culture.
- Lead, mentor, and
develop the security engineering and operations team, managing performance
and capability development.
- Coordinate with
GRC, IAM, network, server, and DevOps teams to embed security controls across
systems and processes.
- Manage third-party
security providers, including SOC, penetration testing, and threat
intelligence vendors, against defined SLAs.
- Maintain and
regularly test the incident response plan and supporting playbooks, including
tabletop and simulation exercises.
- Report security posture, key risks, and incident
metrics to senior management and recommend risk treatment actions.
Key Performance Indicators/Key Success Factors
- Mean time to detect and mean time to
respond to security incidents.
- Percentage of critical and high
vulnerabilities remediated within SLA.
- Closure rate of audit and compliance
findings within committed dates.
- Security awareness training completion rate
and phishing simulation results.
- Availability and coverage of security
monitoring tools across critical systems.
|