Head Cybersecurity - National Capital Region - Singlife Philippines

Paglalarawan

THE COMPANY

Singlife's purpose is to democratize access to meaningful financial protection. Our unique business model uses the smartest technologies to put you in control of your finances, by providing tools and solutions that fit your needs, your budget, and are always on hand. A start-up in a long-standing industry, the company has showed how combining new technologies with life insurance makes it possible for people to manage their finances more effectively and efficiently. Singlife is growing at an exceptional rate driven by a growing portfolio of partnerships with platforms like GCash, where we make our meaningful insurance propositions more accessible to the wider market.

Job Summary:

The Head of Cybersecurity & Infrastructure is accountable for the end-to-end security, resilience, and operational integrity of the organization's technology foundations, including cybersecurity, cloud and on-premise infrastructure, networks, platforms, and core shared services.

This role owns the enterprise cybersecurity strategy, security operations, infrastructure platforms, cloud foundations, and technology resilience, ensuring that all systems are secure-by-design, resilient-by-architecture, and compliant with regulatory and internal control requirements.

The role leads the evolution toward a zero-trust, cloud-first, highly automated, highly resilient infrastructure and security architecture, and is the executive owner of cyber risk management, infrastructure reliability, platform engineering, and technology resilience.

Key Responsibilities:

Cybersecurity Strategy, Governance & Risk

Define and execute the enterprise cybersecurity strategy and roadmap aligned with business, regulatory, and risk objectives.

Own the cyber risk management framework, including:

• Threat modeling
• Risk assessments
• Control frameworks
• Security architecture standards

Ensure compliance with:

• ISO 27001
• Data Privacy Act / GDPR
• Insurance / financial services regulations
• Internal audit and risk requirements

Security Operations (SecOps & SOC)

Own:

• Security monitoring and detection
• SIEM/SOC operations
• Incident response and cyber crisis management

Lead:

• Threat detection and response
• Forensics and investigation
• Post-incident remediation and improvement

Act as executive cyber incident commander during major security events.

Infrastructure & Cloud Platform Ownership

Own:

• Cloud platforms (AWS/Azure/GCP)
• On-premise and hybrid infrastructure
• Networks, connectivity, and shared services

Establish standardized, secure, resilient infrastructure platforms.

Drive:

• Platform engineering
• Automation
• Self-service infrastructure
• FinOps and cost optimization

Architecture, Resilience & Reliability

Ensure all platforms are designed for:

• High availability
• Scalability
• Fault tolerance
• Recoverability

Own:

• Infrastructure resilience patterns
• Multi-region strategies
• Backup and recovery
• Disaster Recovery and BCP technology enablement

Identity, Access & Zero Trust

Own:

• IAM strategy
• Privileged access management
• Identity federation
• Zero Trust implementation

Ensure:

• Least privilege access
• Strong authentication
• Continuous access risk assessment

Vulnerability, Patch & Security Engineering

Own:

• Vulnerability management lifecycle
• Penetration testing
• Security scanning (cloud, containers, apps, infra)
• Patch management governance

Ensure:

• Risk-based remediation
• SLA-driven vulnerability closure

Third-Party, Cloud & Supply Chain Risk

Own:

• Third-party security governance
• SaaS/PaaS/IaaS risk management
• Vendor security due diligence and continuous monitoring

Ensure:

• Contractual security controls
• Ongoing posture assessment

Regulatory, Audit & Executive Reporting

Act as primary executive owner for:

• Security and infrastructure audits
• Regulatory examinations
• Cyber risk reporting to ExCo and Board

Produce:

• Cyber risk posture dashboards
• Infrastructure resilience metrics
• Control effectiveness reporting

Organization, Talent & Operating Model

Build and lead teams covering:

• Security engineering
• Security operations
• Infrastructure & cloud platforms
• Network & shared services

Establish:

• Clear operating model
• On-call and crisis response structure
• Skills development and certification roadmap

Strategy, Modernization & Transformation

Drive:

• Cloud modernization
• Legacy infrastructure reduction
• Security automation and AI-driven security
• Platform standardization

Partner with:

• Architecture
• Applications
• Data
• Operations
• Risk and Compliance

Qualifications:

Bachelor's degree in Computer Science, Engineering, or related field.

With 10+ years in IT, with at least 7+ years leading cybersecurity and/or infrastructure at enterprise scale.

Deep experience in:

• Cybersecurity governance and operations
• Cloud platforms (AWS/Azure/GCP)
• Infrastructure architecture and operations
• Regulated environments (insurance, banking, financial services)

Proven leadership in:

• Major incidents and crisis management
• Large-scale platform environments
• Regulatory and audit engagements

Preferred Qualifications:

Master's degree in IT, Security, or Business

Certifications such as:

• CISSP, CISM, CISA, CCSP
• Cloud certifications (AWS/Azure)

Experience with:

• Zero Trust architectures
• Large SOC environments
• Cloud-native security platforms
• DevSecOps and security automation

Experience in insurance, banking, or fintech environments

Leadership Competencies:

• Strong risk-based decision-making
• Calm and authoritative in crisis
• Highly structured and control-oriented
• Strong executive communication skills
• Strategic thinker with strong execution discipline
• Builder of high-performance engineering teams