Umpisa Inc. is hiring a Security Consulting and Risk Officer (Client-site)

At Umpisa Inc., our mission is to make the Philippines be known globally as a tech hub. Umpisa Inc. is a progressive technology services company that partners with select industries, clients and people to work on pioneering and industry-changing solutions via digital transformation, modern software development and venture building. We create a set of world-class and impactful products and solutions to help organizations and individuals live better lives. We offer demanding, challenging and rewarding careers in software development, product development, emerging technologies, and more for the right candidates. Essential Skills - Aligns with our values: Excellence, Integrity, Professionalism, People Success, Customer Success, Fun, Innovation and Diversity - Strong communication skills - Strong problem solving and analytical skills - Excellent problem-solving ability - Would like to work as part of a self-organizing Scrum team in a scaled agile framework - Must be a self-starter and loves to collaborate with the team and client Job Summary: Responsible for securing data, network, and applications in system development or system implementations. Perform threat modeling, business and technical process analysis, application security and architecture reviews to evaluate, identify vulnerabilities and enforce security controls in IT and application systems. Ensures coordination of penetration testing support and vulnerability validation scans of systems project. Specific Duties & Responsibilities: - Work closely with cross-functional teams - ITG Infrastructure team, ITG DevOps team, Developers, Solutions and Enterprise Architects, Technical Project Managers, Delivery Managers and Project Proponents. - Helps to improve the security health of the application systems, information processing facilities and connected services of the bank by: 1. Providing security consulting services on information security related matters for on premise and cloud-based project implementations and deployments. 2. Serves as project security technical point of contact for system development as it relates to automation, continuous integration/continuous deployment activities and products/services being developed and deployed across the full application development life cycle. 3. Ensure enforcement of security requirements across all new application systems and API deployments. 4. Performs threat modeling and business/technical process analysis to identify vulnerabilities/weaknesses on processes and technology implementations thru a documented analysis and assessment report. 5. Standardize the technical, functional and administrative security requirements covering areas of application system, technical design and architecture. 6. Ensures that the security requirements align with the business objective of the application systems to be implemented. 7. Provides consulting on technical designs and solutions to address infrastructure security and application security related weaknesses. 8. Collaborate with relevant stakeholders to implement security improvements. - Collaborate with the appropriate subject matter expert in Security Architecture and Innovation Department in reviewing security architecture and addressing architecture concerns in a project. - Ensures that source code reviews are performed and validated across all platforms and frameworks. - Coordinates application vulnerability scanning and penetration testing remediation activities with ITG developers. - Assist with vulnerability prioritization and provide guidance on resolution. - Ensures that standard security requirements are kept updated. - Maintains an expert knowledge in the field of Information Security and the related issues, systems, processes, products, and services. Stay current with best security practices. - Collaborates with other ITG Servicing units and application teams to harden its operating systems and application systems to better protect user data when implemented. - Proactively works with the Department Head in implementing programs for the continuous improvement of the bank’s information security posture. - Perform other information security governance, risk and compliance related duties and responsibilities as directed by the Department Head.