Overview

The role’s primary focus is protecting the Firm’s information security interests, leveraging advanced security tools and applications. As part of the Information Security Office (ISO), this role will work closely with technology functions to identify areas of improvement and supporting initiatives to promote information security within the organization.

Responsibilities

• Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization’s data, systems, and networks.

• Troubleshooting Security and network related problems.

• Responding to all system and/or network security issues.

• Ensuring the organization’s data and infrastructure are protected by enabling the appropriate security controls.

• Participating in the change management process.

• Testing and identifying network and/or system security vulnerabilities.

• Evaluating the organization’s security requirements and establishing best practices and standard accordingly.

• Daily administrative tasks, reporting, and communication with the relevant stakeholders in the organization.

Qualifications

• Bachelor’s degree in Information Technology or a related IT course.

• Must have at least 5–10 years of experience in Security Engineering, including hands-on experience in designing, implementing, and monitoring information security controls.

• Strong hands-on security engineering experience is required.

• Minimum of 3–5 years of hands-on experience with at least 2 or more of the following security tools and technologies (or equivalent SIEM/security platforms):

  • Microsoft Sentinel

  • Microsoft Defender Suites (Identity, Endpoint, Security, Cloud, etc.)

  • CyberArk Privileged Access Management (PAM)

  • Zscaler Cloud Security

  • Tenable Vulnerability Management

  • Sumo Logic

  • Exabeam

  • ArcSight

  • CrowdStrike (SIEM capabilities)

  • Google SecOps

Candidates with experience in other SIEM or security platforms are also encouraged to apply, provided they demonstrate strong hands-on security engineering experience in implementation, configuration, integration, and monitoring of security controls.

• Excellent verbal and written communication skills, with the ability to coordinate effectively with vendors and global teams. Proven and strong technical writing capability – candidates should be prepared to provide and/or discuss writing samples.

• Strong administrative capabilities in task development, time management, and resource allocation to meet target deadlines.

• Demonstrated troubleshooting, follow-through, and critical-thinking skills.

• High level of risk intelligence and security awareness.

• Relevant vendor and/or vendor-neutral certification(s) such as Microsoft Security Operations Analyst (SC-200), Microsoft Cybersecurity Architect (SC-100), CyberArk Trustee / CyberArk Defender / CyberArk Sentry / CyberArk Guardian, Zscaler Digital Transformation Administrator (ZDTA) / Zscaler Digital Transformation Engineer (ZDTE), CASP+, ISC2 SSCP.

Work Shift and Arrangement

• Embrace a dynamic work environment to work on a shifting schedule to support global InfoSec Operations.

• On-call rotation participation.

• Amenable to go on a hybrid working arrangement (at least 3 days work onsite per week) and work in Makati City.

#MIDSENIOR

#INFOSEC

#LI-MJ1

#LI-HYBRID

What You Can Expect from Us

Our people are the moving force behind our work. We are committed to building a culture that values diverse skills, perspectives, and experiences. If you have the skills, passion, and drive to help us bring clarity and transparency to capital markets, we want to work with you.

Together, we can grow your career in an environment that fuels creativity, drives innovation, and has real impact.

About ISS STOXX

ISS STOXX delivers world-class research, data, and technology solutions that empower capital market participants to pursue their visions with confidence. Our expertise spans indices, corporate governance, sustainability, cyber risk, and fund intelligence, giving clients the tools they need to uncover opportunities, manage risks, and navigate evolving regulations. We are made up of 4,000 professionals operating across 20 countries and serving approximately 5,000 clients, including many of the world’s leading institutional investors. Our scale and reach give us deep market knowledge, while our innovative methodologies allow us to offer our clients tailored insights that drive impact and success.  

Visit our website: https://www.iss-stoxx.com/

View additional open roles: https://www.iss-stoxx.com/about/careers/

ISS STOXX is an equal employment opportunity employer and does not discriminate against any employee or applicant because of race, color, ethnicity, creed, religion, sex, age, height, weight, citizenship status, national origin, social origin, sexual orientation, gender identity or gender expression, pregnancy status, marital status, familial status, mental or physical disability, veteran status, military service or status, genetic information, or any other characteristic protected by law (referred to as “protected status”). All activities including, but not limited to, recruiting and hiring, recruitment advertising, promotions, performance appraisals, training, job assignments, compensation, demotions, transfers, terminations (including layoffs), benefits, and other terms, conditions, and privileges of employment, are and will be administered on a non-discriminatory basis, consistent with all applicable federal, state, and local requirements.