Cybersecurity Analyst

Work Setup: ONSITE (Pasig)

Work Schedule: AU DAYSHIFT

We are seeking a skilled Security Analyst reporting to our Group Head of Technology that will play a critical role in protecting our organization’s information systems and data. This position will be responsible for managing our security infrastructure, responding to threats, and ensuring our security posture remains robust and compliant with industry standards.

Why you want this role

• Hands-On Security Impact - You'll directly protect the organization by managing cutting-edge security platforms like CrowdStrike, responding to real threats, and making decisions that immediately strengthen our security posture.
• Comprehensive Skill Development - Gain broad exposure across the entire security lifecycle-from threat intelligence and incident response to penetration testing coordination and compliance frameworks-building expertise that accelerates your cybersecurity career.
• Trusted Security Advisor - Take ownership as the go-to security expert for your region, presenting to stakeholders, responding to due diligence queries, and shaping security strategy rather than just following orders.

What we are looking for

• Proactive Self-Starter - takes initiative in identifying and responding to security threats, stays ahead of emerging risks, and doesn't wait to be told what to do when security issues arise.
• Clear Communicator - ability to translate complex technical security concepts into understandable language for non-technical stakeholders
• Detail-Oriented Problem Solver - An analytical thinker who can methodically investigate security incidents, spot anomalies in logs and alerts, and track multiple compliance requirements

About the role Key accountabilities

Security Platform Management

• Administer and manage CrowdStrike security platform, including deployment, configuration, and optimization
• Monitor security alerts and events through CrowdStrike console
• Perform regular health checks and ensure platform updates are applied
• Manage endpoint detection and response (EDR) activities
• Configure and fine-tune detection rules and policies

Threat Detection & Response

• Monitor, analyses, and respond to security incidents and alerts
• Investigate suspicious activities and potential security breaches
• Perform root cause analysis on security incidents
• Document incident response procedures and maintain incident logs
• Implement remediation measures and track resolution progress

Security Reporting & Communication

• Prepare regular security status reports for management
• Provide updates on security metrics, incidents, and trends
• Generate monthly and quarterly security dashboards
• Present findings and recommendations to stakeholders
• Respond to internal and external due diligence queries regarding security controls and practices

Threat Intelligence & Awareness

• Stay current with emerging security threats, vulnerabilities, and attack vectors
• Monitor threat intelligence feeds and security advisories
• Assess the relevance and impact of new threats to the organization
• Share threat intelligence insights with the team
• Recommend proactive security measures based on threat landscape

Security Testing & Compliance

• Coordinate and manage annual penetration testing exercises
• Work with external security assessors and penetration testers
• Review penetration test findings and develop remediation plans
• Track and verify remediation of identified vulnerabilities
• Conduct annual Essential Eight security maturity assessments
• Ensure compliance with Essential Eight framework requirements
• Document security controls and maintain compliance evidence

Vulnerability Management

• Conduct regular vulnerability scans and assessments
• Prioritize vulnerabilities based on risk and business impact
• Track remediation efforts and coordinate with IT teams
• Maintain vulnerability management database and reporting
• Verify patch compliance across systems and endpoints

Access Control & Identity Management

• Ensure principle of least privilege is maintained
• Monitor privileged account usage and activities

Security Monitoring & Log Analysis

• Review security logs from various systems and applications
• Correlate events across multiple security tools
• Identify anomalous behavior and potential security issues
• Maintain and tune security monitoring rules and alerts
• Archive logs in compliance with retention policies

Security Tools Administration

• Manage antivirus, anti-malware, and endpoint protection solutions
• Administer firewalls, intrusion detection/prevention systems
• Maintain data loss prevention (DLP) tools
• Configure and manage web filtering and email security gateways
• Ensure security tools are properly integrated and functioning

Change Management & Configuration Review

• Review changes to critical systems for security implications
• Participate in change advisory board meetings
• Assess security impact of proposed system changes Verify security configurations align with hardening standards
• Maintain secure baseline configurations

Vendor & Third-Party Risk Management

• Assess security posture of vendors and third-party providers
• Review vendor security documentation and certifications
• Monitor compliance with contractual security requirements
• Participate in vendor security assessments
• Support procurement process with security evaluations

Backup & Disaster Recovery

• Verify security of backup systems and processes
• Test backup restoration procedures periodically
• Review disaster recovery and business continuity plans from a security perspective
• Ensure encrypted backups are maintained and accessible
• Participate in disaster recovery exercises

Documentation & Continuous Improvement

• Maintain security policies, procedures, and documentation
• Create and update security runbooks and playbooks
• Contribute to security awareness and training initiatives
• Develop security metrics and KPIs
• Identify opportunities for security process improvements
• Participate in security projects and initiatives
• Conduct security tabletop exercises

Skills, qualifications and experience

• 4+ years working in information security or cybersecurity operations
• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field
• Familiarity with fund management, non-bank lending industry and regulatory landscape.
• Hands-on experience with security monitoring and incident response

Desirable:

• Relevant security certifications (Security+, CySA+, CEH, GCIH, or similar)
• CrowdStrike Certified Falcon Administrator or similar certification
• Experience with compliance frameworks (ISO 27001, NIST, CIS Controls)
• Familiarity with scripting languages (PowerShell, Python)
• Knowledge of Australian government security frameworks (ACSC, ISM)
• Ability to explain technical security concepts to non-technical stakeholders
• Proven experience with CrowdStrike or similar EDR/XDR platforms
• Strong understanding of security principles, threats, and vulnerabilities
• Knowledge of Windows and Linux operating systems
• Familiarity with network protocols, firewalls, and security technologies
• Experience with security information and event management (SIEM) tools
• Knowledge of penetration testing methodologies and vulnerability management