Senior Manager, Digital Security

Position Objective:

•  Lead the daily operations for Application Identity and Access Management.

•  Plan and deliver the roadmap of control and process enhancements to take Application IAM to the next level

Roles and Responsibilities:

Application onboarding

•  Drive onboarding rate of applications to Sailpoint. Improve speed while simplifying and reducing cost/overhead.

•  Enforce integration patterns to improve day 1 application connectivity

Access Control Matrix

•  Implement a tool and related processes for storing, reviewing, recertifying ACM to allow dependant processes to operate according to standard and regulatory requirements

Application privileged ID controls

•  Ensure processes and technology are in place to identify, control and report on all types of application PID.

Recertification

•  Define and run processes and technology to allow clear and informed access reviews for all onboarded applications.

SOD / Toxic Access

•  Coach BUs in defining SOD, build technology an dprocesses to enforce fotr existing and new access.

Application IAM Governance

•  Identify and document indicators across the application IAM space to ensure confliance and visivility both within the teams activities and within BU activities.

Financial and Non-Financial Measures:

Significant increase in documented controls over application IAM and governance/reporting of the operation of those controls

Reporting Structure and Supervisory / Managerial Responsibilities:

· 10-15 initial team members

• Communicates and coordinates within GIS-IAM to ensure initiatives, BAU and reporting are aligned. Communicates regularly across BUs with application owners, local application administrators and architecture teams as well as local information security. Able to report to senior group audiences on application IAM concepts.

• Required to communicate and negotiate professionally with vendors and service providers.

Minimum Job Requirements:

• 8+ years of relevant professional experience within Information Security, Technology Risk, or Governance, with a strong background in Identity and Access and application controls.

• Exceptional organisational and prioritisation skills, with proven ability to rationalise competing demands and manage multiple workstreams effectively.

• Strong presentation and briefing capabilities, with demonstrated experience engaging senior executive audiences.

• Proven ability to translate complex and technical concepts into clear, concise, and actionable messages for diverse audiences, both verbally and in writing.

• Sound judgement and decision‑making ability, including experience evaluating trade‑offs, assessing risk versus benefit, and recommending appropriate courses of action.

Work Setup: Hybrid, 4x RTO

Loc: Makati