Vulnerability Assessment & Management Analyst (Officer)

About the Job

Location: Makati City

Corporate Title: Assistant Manager to Manager

Work Arrangement: Hybrid

Our Information Security & Data Protection Office team is looking for experienced professionals to join us in Makati City with the role of Vulnerability Assessment & Management Analyst

In this role you will provide expert advice and guidance on Information Security matters, ensuring stakeholders are well-informed for sound security decisions. Effectively support the Information Security team, fostering a positive and innovative work environment. You will also have to provide support a team of Vulnerability Assessment and Penetration Testing (VAPT) and Information Security/Risk Management security professionals.

Your dream. Our focus.

East West Banking Corporation (EastWest) is one of the largest universal banks in the Philippines, and is committed to continuously invest in people and in process, product, and service enhancements, and embrace new ideas to enhance the EastWest experience.

We empower our employees to drive their careers and are committed to provide the runway for them to grow. We value teamwork and individual initiative. Join us and be part of a highly engaged team, and a workplace that promotes development and goal attainment.

Whether you're just starting out, or already a seasoned professional, EastWest can help you unleash your potential, and bridge the gap between dream to success.

What the role will entail

• Lead and support vulnerability assessments, penetration testing, and red team engagements across applications, infrastructure, and enterprise platforms to identify and mitigate cybersecurity risks.
• Guide and mentor team members by setting performance goals, providing coaching, and fostering professional growth to ensure effective team delivery.
• Ensure security controls are embedded in new projects, system changes, and development initiatives through proactive security reviews and vulnerability assessments.
• Develop and enhance red team testing methodologies, tactics, techniques, and procedures to address evolving cyber threats and maintain effective security testing capabilities.
• Oversee enterprise vulnerability and threat management programs, including vulnerability prioritization, remediation planning, patch management, and risk-based reporting.
• Analyze threat intelligence, vulnerability data, and security trends to assess organizational exposure and recommend actionable remediation strategies.
• Prepare and present comprehensive technical and executive-level reports, metrics, and dashboards on vulnerabilities, security posture, assessment coverage, and remediation effectiveness to key stakeholders.

What we're looking for

• Bachelor's degree in Information and Communications Technology (ICT), Computer Science, Cybersecurity, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, CEH, or equivalent credentials preferred.
• Demonstrated experience in Information Security, Cybersecurity, IT Risk Management, Network Security, or related disciplines.
• Proven expertise in implementing and managing security and compliance frameworks, including PCI-DSS, ISO 27001, NIST Cybersecurity Framework, and Data Privacy programs.
• Hands-on experience with vulnerability assessment and penetration testing (VAPT) tools such as Kali Linux, Tenable, Rapid7, Metasploit, Burp Suite, Qualys, and Nmap.
• Strong technical knowledge of vulnerability management, penetration testing methodologies, networking technologies (TCP/IP, SSH, SFTP, VPNs, firewalls, routers), and Windows/Linux operating systems.

What you can expect from joining our team

• Career development and training opportunities
• Competitive salary package and benefits
• Performance-based incentives and recognition programs to reward high-performing individuals
• Opportunity to work with industry experts and be mentored by them
• Defined career progression paths to guide you in your professional growth