Deskripsi Pekerjaan
Are you a seasoned cybersecurity professional ready to lead security initiatives at a premier ecommerce platform? SnapMart is looking for a strategic and technical IT and Application Security Manager to champion our security posture in Parañaque City.
In this high-impact role, you will be responsible for safeguarding SnapMart’s digital ecosystem, including our enterprise systems, customer data, and high-traffic applications. As we continue our rapid expansion, you will ensure that security is not just an afterthought but a core component of our software development lifecycle (SDLC) and infrastructure operations. We are looking for a leader who can balance the rigors of technical defense with the agility required in a fast-paced retail environment.
You will work cross-functionally with engineering, product, and DevOps teams to mitigate risks, implement cutting-edge security controls, and drive a culture of security awareness. If you thrive on solving complex security challenges and staying ahead of emerging threats, this is the perfect opportunity to shape the future of secure ecommerce at SnapMart.
Tanggung Jawab
- Develop and execute a comprehensive security strategy covering IT infrastructure and application security (AppSec).
- Integrate automated security testing tools (SAST, DAST, and SCA) into the CI/CD pipeline to ensure secure code deployment.
- Lead threat modeling exercises and risk assessments for new features and system architectures.
- Manage the incident response lifecycle, from initial detection and containment to forensic analysis and remediation.
- Oversee vulnerability management programs, including internal scanning and coordinating external penetration testing.
- Ensure organizational compliance with the Philippine Data Privacy Act and international standards such as ISO 27001 or SOC2.
- Mentor and guide technical teams on secure coding practices and modern security protocols.
Kualifikasi
- Bachelor’s degree in Computer Science, Information Technology, or a related cybersecurity field.
- Minimum of 6 years of experience in Information Security, with at least 2 years in a managerial or lead role.
- Strong expertise in Application Security and deep familiarity with the OWASP Top 10 framework.
- Hands-on experience securing cloud environments (AWS, Azure, or GCP) and containerized services (Docker/Kubernetes).
- Professional certifications such as CISSP, CISM, or CSSLP are highly desirable.
- Proven track record of managing security incidents and implementing enterprise-grade security tools (SIEM, WAF, IAM).
- Excellent stakeholder management and communication skills.