Third Party Security Management Manager (Fintech)

Location: NCR - WGC, Philippines

Company

hirify.global operates GCash, a fintech company focused on innovative and convenient financial solutions for the Philippines.

What you will do

• Lead the design and execution of initiatives that improve the maturity of the Third-Party Security Management program.
• Lead, mentor, and develop a team of security analysts while ensuring high-quality assessments.
• Define and maintain third-party security assessment frameworks, including risk tiers, methodologies, and reporting criteria.
• Oversee third-party security control assessments, validation, ongoing monitoring, and risk-gap escalations.
• Collaborate with Legal on security clauses and right-to-audit provisions in third-party contracts.
• Lead third-party security incident response, mitigation, breach notification compliance, and reporting to senior leadership.

Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field.
• At least 7 years of experience in cybersecurity or information security, including 4 years managing or performing third-party security risk assessments.
• Experience leading a security team and managing enterprise-scale third-party security risk programs.
• Deep knowledge of NIST, ISO 27000 series, SOC 2, PCI DSS, and Cloud Security Alliance standards.
• Experience with TPRM and GRC platforms such as OneTrust, Archer, ProcessUnity, or ServiceNow, plus ticketing systems such as JIRA.
• Strong analytical, communication, risk negotiation, and data-driven process-automation skills.

Nice to have

• CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor certification.
• Project management skills.

Culture & Benefits

• Career growth and development opportunities.
• Work with a dynamic and collaborative team focused on fintech innovation.
• Competitive and flexible compensation and benefits package.