Third Party Security Management Manager
Read straight from GCash's careers page, verified 3d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationNCR - WGC
Typefull-time
SeniorityLead
Experience7+ yrs
Company size1,001–5,000 people
PostedMar 17, 2026 · 7mo ago
Verified live3d ago
May no longer be actively hiring
Posted by the company on Mar 17, 202659% of this company's open roles have been listed for 90+ days
At a glanceSummarised by Seekless from the posting.
Lead the design and execution of long-term initiatives to enhance the maturity of the TPSM program
Lead, mentor, and develop a team of security analysts
Identify process inefficiencies and lead optimization efforts
Direct and lead TPSM Team cross-functional projects
Define and maintain the third-party security assessment framework
Oversee the assessment and validation of third party security controls
Collaborate with Legal to negotiate security clauses in third-party contracts
Manage escalations and third party security gaps
Implement processes for ongoing surveillance of third party security postures
Lead response to third-party security incidents
Develop and present program metrics and risk indicators to senior leadership
Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field
Minimum 7 years in cybersecurity or information security
Minimum 4 years directly managing or performing third-party security risk assessments
Proven experience leading a security team and managing enterprise-scale third party security risk programs
Deep technical knowledge of NIST, ISO 27000 series, SOC 2, PCI DSS, and Cloud Security Alliance (CSA) standards
Proficiency with TPRM and GRC platforms (e.g., OneTrust, Archer, ProcessUnity, or ServiceNow) and ticketing systems (e.g., JIRA)
Ability to explain complex technical risks to non-technical stakeholders and negotiate effectively with external partners
Strong analytical skill and ability to leverage data and automation to scale risk assessment processes
CISSP
CISM
CISA
CRISC
ISO 27001 Lead Auditor
Project management skills
Skills
OneTrust
Archer
ProcessUnity
ServiceNow
JIRA
Benefits
Career growth and development
Competitive and flexible compensation and benefits package
About the company
Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!
Responsibilities
Key Responsibilities
Program Leadership & Strategic Initiatives
•
Lead the design and execution of long-term initiatives to enhance the maturity of the Third-Party Security Management (TPSM) program.
•
Lead, mentor, and develop a team of security analysts, ensuring high-quality output
•
Identify process inefficiencies and lead optimization efforts to reduce assessment turnaround times without compromising risk standards.
•
Direct and lead TPSM Team cross-functional projects
Risk Assessment & Governance
•
Define and maintain the third-party security assessment framework, including risk tiering and criteria, assessment methodology, and reporting criteria.
•
Oversee the assessment and validation of third party security controls
•
Collaborate with Legal to negotiate security clauses and “right-to-audit” provisions in third-party contracts.
•
Manage escalations and third party security gaps to ensure alignment with company policies and global regulations (e.g., GDPR, NIST, ISO).
Monitoring & Incident Management
•
Implement processes for the ongoing surveillance of third party security postures
•
Lead the response to third-party security incidents, ensuring proper mitigation, breach notification compliance, and post-incident reporting.
•
Develop and present program metrics and risk indicators to senior leadership to inform risk-based decision-making.
Requirements
Requirements:
Education & Certifications
•
Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field.
•
Highly preferred: CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Auditor.
Professional Experience
•
Minimum of 7 years in cybersecurity or information security.
•
Minimum of 4 years directly managing or performing third-party security risk assessments.
•
Proven experience leading a security team and managing enterprise-scale third party security risk programs.
•
Project management skills are a plus
Technical Skills & Competencies
•
Deep technical knowledge of NIST, ISO 27000 series, SOC 2, PCI DSS, and Cloud Security Alliance (CSA) standards.
•
Proficiency with TPRM and GRC platforms (e.g., OneTrust, Archer, ProcessUnity, or ServiceNow) and ticketing systems (e.g., JIRA).
•
Ability to explain complex technical risks to non-technical stakeholders and negotiate effectively with external partners.
•
Strong analytical skill and ability to leverage data and automation to scale risk assessment processes.
What We Offer
Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package