Explore Fulfilling Careers at Meralco and take Part in #BuildingABrilliantFuture!
Why Join Us
Come aboard so we can Build a Brilliant Future Together!
Meralco is more than a power distribution company. It is home to those who value innovation, dynamism, as well as development of one's self and well-being. Meralco wholeheartedly believes in the significance of customer service, performance, accountability, integrity, and teamwork.
Mayroong tunay na malasakit sa kapwa at sa bayan.
Meralco brings out the best in people by championing innovative solutions that move everyone towards a promising future together – for its employees, customers, community and country.
Join us at Meralco and experience a brilliant life.
Meralco. Ang Liwanag ng Bukas.
Meralco is looking for a Business and Asset Management.
JOB SUMMARY
- Lead the design, definition, and end-to-end management of cyber asset lifecycle processes across Meralco and its subsidiaries. Drive cybersecurity maturity, policy enforcement, and risk alignment at the business unit and subsidiary level. Orchestrate process improvement, tool enablement, and consistent implementation of enterprise cybersecurity controls. Provide secondary support to the Third-Party Cyber Risk Management function for continuity as needed.
KEY RESPONSIBILITIES
Cyber Asset Management
- Design, define, and own the end-to-end cyber asset lifecycle management framework—from acquisition through disposal—embedding security controls at every stage.
- Establish and continuously improve a complete, accurate enterprise-wide inventory of digital and cyber assets, including subsidiaries.
- Define asset ownership, custodianship, classification, and prioritization models based on business criticality and data sensitivity.
- Introduce and drive adoption of enabling tools and processes that improve asset visibility, accuracy, and governance.
- Orchestrate collaboration with ICT and OT Network teams to ensure data integrity and consistency.
- Provide structured asset intelligence to support vulnerability management and risk reduction programs.
- Monitor critical asset utilization and drive optimization and risk mitigation actions.
Business Unit & Subsidiary Cybersecurity
- Design and lead initiatives that elevate cybersecurity maturity and compliance across business units and subsidiaries.
- Drive consistent enforcement and adoption of enterprise cybersecurity strategies, policies, standards, and controls.
- Serve as the primary interface between subsidiaries and the parent company on cybersecurity matters; orchestrate communication and coordinated action.
- Influence and enable standardization of tools, technologies, and security programs across the group, where applicable.
- Establish monitoring, reporting, and accountability mechanisms for subsidiary security posture and compliance.
- Engage and influence subsidiary stakeholders to address unique risks and embed a stronger security culture.
- Represent and escalate subsidiary cybersecurity risks and constraints in enterprise risk forums.
Enterprise Risk Alignment
- Align cybersecurity risk processes with the Meralco Enterprise Risk Management framework.
- Drive disciplined tracking and closure of cyber risk remediation actions.
- Contribute to the design and execution of enterprise cyber risk mitigation strategies.
Third-Party Cyber Risk Support (Secondary)
- Provide continuity support to the TPCRM team. Assist with vendor assessments, contract reviews and management, and vendor incident management.
