Vice President, Infrastructure and Network Security

Salary: ₱120,000 – ₱150,000 per month

About the role

The Vice President, Infrastructure & Network Security is a hands-on technical leader responsible for driving the execution of Axos Bank's network security, infrastructure hardening, and cyber hygiene strategy—and for fundamentally transforming how this function operates through AI. This role owns a critical portfolio of security platforms—including microsegmentation, ZTNA, vulnerability management, privileged access management, asset intelligence, email security, and database security—and is accountable for both their day-to-day operations and their AI-driven transformation. A defining expectation of this role is to champion the AI transformation of the infrastructure and network security team by identifying every manual, repetitive, and human-dependent workflow across the platform portfolio and systematically building or deploying AI agents to automate them.

Key responsibilities

• Champion the AI transformation of the infrastructure and network security function with a clear mandate: identify, build, and deploy AI agents that eliminate manual toil and scale team productivity by 10x

• Inventory every manual and repetitive workflow across the platform portfolio—vulnerability triage, scan scheduling, PAM access reviews, asset reconciliation, segmentation policy recommendations, compliance evidence gathering, executive reporting—and build an AI automation roadmap to systematically replace them

• Build and maintain AI agents that perform work traditionally done by analysts: triaging vulnerability findings with risk-based prioritization, generating microsegmentation policy recommendations based on traffic analysis, automating privileged access certifications, and producing cyber hygiene dashboards and reports

• Own and operate the team's security platform portfolio: microsegmentation (Guardicore), ZTNA/SASE (Cisco Secure Access), vulnerability management (Qualys VMDR), privileged access management (PAM), asset intelligence (Axonius), email security, and database security platforms

• Architect and implement network security solutions including segmentation strategies, ZTNA policies, secure access configurations, and least-privilege network controls

• Drive the cyber hygiene program including vulnerability scanning, patch validation, configuration compliance, and asset inventory accuracy—increasingly through AI agents rather than manual processes

• Build and lead a high-performing infrastructure and network security team, developing team capability through pairing on technical work and coaching team members while solving problems together

• Drive execution of the infrastructure and network security roadmap including platform upgrades, AI agent deployments, capability enhancements, and tool consolidations

• Own the enterprise cyber hygiene program: vulnerability management lifecycle, patch compliance tracking, configuration drift detection, and security baseline enforcement—with AI agents handling the bulk of triage, prioritization, and reporting

• Troubleshoot complex technical issues across the platform portfolio and drive vendor escalations to resolution

Requirements:

• 8+ years of progressive experience in information security or network engineering with at least 3 years in technical leadership roles where you personally built solutions while managing teams

• Recent hands-on work with network and infrastructure security platforms—not just oversight. You should be able to configure a segmentation policy, build a Qualys scan profile, design a PAM workflow, or troubleshoot a ZTNA connectivity issue without handing it off

• Demonstrated experience building or deploying AI/automation solutions in a security context—this could include AI-powered triage workflows, LLM-based investigation agents, automated compliance pipelines, or similar

• History of driving security platform deployments, migrations, or maturity initiatives where you were personally in the technical weeds, not just managing from above

• Deep expertise in network security architecture including microsegmentation, ZTNA/SASE, firewalls, email security, and network access control

• Strong hands-on experience with vulnerability management platforms (Qualys or equivalent) including scan configuration, asset grouping, reporting, and remediation workflows

• Experience with privileged access management solutions (CyberArk, BeyondTrust, Delinea, or equivalent) including vault architecture, session management, and credential rotation

• Familiarity with asset intelligence and cyber asset management platforms (Axonius or equivalent) for coverage gap analysis and security hygiene enforcement

• Understanding of AI/LLM agent architectures, prompt engineering, and automation orchestration platforms—enough to design, build, or direct the build of AI agents that integrate with security platforms via APIs

• Understanding of banking compliance frameworks (FFIEC, GLBA, PCI DSS) as they relate to network and infrastructure security controls